diff --git a/testsite/group_vars/ldap.yml b/testsite/group_vars/ldap.yml
index e8d9aebdd8bb97d10d8b7fe6804897d662e5321e..350d5a2ddc79bdb6139d68ca9d43e879b5f0f886 100644
--- a/testsite/group_vars/ldap.yml
+++ b/testsite/group_vars/ldap.yml
@@ -19,6 +19,9 @@ ldap_client_config:
   - comment: Set the LDAP TLS truststore
     option: TLS_CACERT
     value: /etc/ssl/certs/ca.pem
+  - comment: Enforce TLS
+    option: TLS_REQCERT
+    value: demand
 
 ldap_server_domain: "{{ testsite_domain }}"
 ldap_server_organization: "Example Inc."