diff --git a/.buildkite/hooks/pre-command b/.buildkite/hooks/pre-command
new file mode 100644
index 0000000..d86d1e8
--- /dev/null
+++ b/.buildkite/hooks/pre-command
@@ -0,0 +1,9 @@
+#!/bin/bash
+
+if [[ $BUILDKITE_ORGANIZATION_SLUG = 'chef-canary' ]]; then
+  AWS_REGION='us-west-1'
+elif [[ $BUILDKITE_ORGANIZATION_SLUG = 'chef' ]] || [[ $BUILDKITE_ORGANIZATION_SLUG = 'chef-oss' ]]; then
+  AWS_REGION='us-west-2'
+fi
+
+export HAB_AUTH_TOKEN=$(aws ssm get-parameter --name 'habitat-prod-auth-token' --with-decryption --query Parameter.Value --output text --region ${AWS_REGION})
diff --git a/.expeditor/build_gems.ps1 b/.expeditor/build_gems.ps1
index ef1568f..1956e40 100644
--- a/.expeditor/build_gems.ps1
+++ b/.expeditor/build_gems.ps1
@@ -24,8 +24,8 @@ $env:MSBuildEnableWorkloadResolver = "false"
 
 # setting the channel in this way gets access to the LTS channel and falls back to stable if the plan doesn't live there.
 Write-Output "--- :shovel: Setting the BLDR and REFRESH Channels to LTS"
-$env:HAB_BLDR_CHANNEL="LTS-2024"
-$env:HAB_REFRESH_CHANNEL = "LTS-2024"
+$env:HAB_BLDR_CHANNEL="base-2025"
+$env:HAB_REFRESH_CHANNEL = "base-2025"
 Write-Output "`r"
 
 Write-Output "--- :screwdriver: Installing Habitat via Choco"
@@ -74,7 +74,7 @@ Write-Output "`r"
 
 
 Write-Output "--- :construction: Building 64-bit PowerShell DLLs"
-hab pkg build Habitat --refresh-channel LTS-2024
+hab pkg build Habitat --refresh-channel base-2025
 if (-not $?) { throw "unable to build"}
 Write-Output "`r"
 
diff --git a/.expeditor/verify.pipeline.yml b/.expeditor/verify.pipeline.yml
index 5443ab7..be820bf 100644
--- a/.expeditor/verify.pipeline.yml
+++ b/.expeditor/verify.pipeline.yml
@@ -18,6 +18,8 @@ steps:
         host_os: windows
         image: rubydistros/windows-2019:3.1
         shell: [ "powershell", "-Command" ]
+        environment:
+          - HAB_AUTH_TOKEN
 
 - label: ":windows: pre-build-verify-windows-gem - Ruby 3.4"
   commands:
@@ -28,6 +30,8 @@ steps:
         host_os: windows
         image: rubydistros/windows-2019:3.4
         shell: [ "powershell", "-Command" ]
+        environment:
+          - HAB_AUTH_TOKEN
 
 - label: ":windows: What version of Ruby are we using?"
   command: