diff --git a/configuration-files/roles/dns_backend/tasks/unbound.yml b/configuration-files/roles/dns_backend/tasks/unbound.yml
index 86a5a3f..ed8c388 100644
--- a/configuration-files/roles/dns_backend/tasks/unbound.yml
+++ b/configuration-files/roles/dns_backend/tasks/unbound.yml
@@ -17,6 +17,12 @@
     name: unbound
     state: started
 
+- name: unbound | control key present
+  command:
+    argv:
+      - /usr/sbin/unbound-control-setup
+    creates: /etc/unbound/unbound_server.pem
+
 - name: unbound | generate config file from template
   template:
     src: unbound.conf.j2