diff --git a/config/roles/openvpn/tasks/credentials.yml b/config/roles/openvpn/tasks/credentials.yml
index b7e5dec0ddb422c0e4ca244541d09a93c1d19ee8..316d6218a0cf85668d2bf9e6ced6f8500a9873cd 100644
--- a/config/roles/openvpn/tasks/credentials.yml
+++ b/config/roles/openvpn/tasks/credentials.yml
@@ -9,6 +9,12 @@
       ca: "{{ credentials_dir }}/common/api_ca.crt"
       ca_key: "{{ credentials_dir }}/common/api_ca.key"
 
+- name: Restart openvpn because gateway certificate has changed
+  systemd:
+    name: docker-openvpn-openvpn.service
+    state: restarted
+  when: sspki_sign.changed
+
 - name: Add the docker-openvpn user to the openvpn-sspki group
   user:
     name: docker-openvpn