diff --git a/README.md b/README.md
index c1e1a9e42ebf0bdfdf3669c294d961f5e976559a..bb427e13602ad9bbe94189997f97f62289fc6933 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,7 @@
 - [local.yml](./local.yml): The main playbook file, can be seen as the entry point
   - [roles](./roles): Contains multiple roles (can be seen as small task specific playbooks). The 
     roles are called in the [local.yml](./local.yml)
+    - [telesec-globalroot-ca](./roles/telesec-globalroot-ca/tasks/main.yml): Install the root ca certificate for eduroam to `/etc/wpa_supplicant/T-TeleSec_GlobalRoot_Class_2.crt`
     - [git-clone](./roles/git-clone/tasks/main.yml): Clone the [ai-at-the-edge](https://code.fbi.h-da.de/pse-ai-at-the-edge/ai-at-the-edge) repository into the notebooks directory
     - [jupyter-lab](./roles/jupyter-lab/tasks/main.yml): Install jupyter-lab and configure it with a systemd service and autostart
     - [misc-applications](./roles/misc-applications/tasks/main.yml): Install additional extra applications
diff --git a/local.yml b/local.yml
index 88e77eb52910abdbad5e4b40e7588c76f65ced8d..936d19d10af2742130879fc8f21dff89b47f5f51 100644
--- a/local.yml
+++ b/local.yml
@@ -29,6 +29,7 @@
           - python3-venv
 
   roles:
+    - telesec-globalroot-ca
     - git-clone
     - jupyter-lab
     - ml-python-packages
diff --git a/roles/telesec-globalroot-ca/files/T-TeleSec_GlobalRoot_Class_2.crt b/roles/telesec-globalroot-ca/files/T-TeleSec_GlobalRoot_Class_2.crt
new file mode 100644
index 0000000000000000000000000000000000000000..0911a562934374fbb203efb9d9d94edf0eb1d0b3
Binary files /dev/null and b/roles/telesec-globalroot-ca/files/T-TeleSec_GlobalRoot_Class_2.crt differ
diff --git a/roles/telesec-globalroot-ca/tasks/main.yml b/roles/telesec-globalroot-ca/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..12ef373948f316e24aed48a3ce63f924b41196f2
--- /dev/null
+++ b/roles/telesec-globalroot-ca/tasks/main.yml
@@ -0,0 +1,8 @@
+---
+# roles/telesec-globalroot-ca
+
+- name: Copy requirements.txt to remote fs
+  become: true
+  copy:
+    src: files/T-TeleSec_GlobalRoot_Class_2.crt
+    dest: /etc/wpa_supplicant/T-TeleSec_GlobalRoot_Class_2.crt