diff --git a/roles/base/tasks/core_cert.yml b/roles/base/tasks/core_cert.yml
index 7480563..493246a 100644
--- a/roles/base/tasks/core_cert.yml
+++ b/roles/base/tasks/core_cert.yml
@@ -15,7 +15,7 @@
     state: latest
     extra_args: --upgrade
   when: ansible_python_version is version('3', '>=')
-  become: no
+  become: yes
 
 - name: Install latest python2-cryptography
   package:
@@ -30,7 +30,7 @@
     executable: pip3
     state: latest
   when: ansible_python_version is version('3', '>=')
-  become: no
+  become: yes
 
 - name: Ensure directory exists for local self-signed TLS certs
   file: