diff --git a/doc/macos.rst b/doc/macos.rst
index 71c62285d4d7af7ed4cc9f6d143de71c08a622ca..b3f2c4f43d90f3ce1185b4336faf50208594b6c2 100644
--- a/doc/macos.rst
+++ b/doc/macos.rst
@@ -182,7 +182,12 @@ Building the reference setup
 12. Once installed, go the the settings and in "General" uncheck the option
     "Use gRPC FUSE for file sharing". At the time of writing (04.10.2021), the
     gRPC Fuse system does not work well with beat/beat.core> testing.
-13. Reboot the machine. At this point, the gitlab user should be auto-logged
+13. Import Idiap's self-signed root certificate::
+
+        $ curl -o cert.crt -s https://pki.idiap.ch/download/Idiap_2016_Root-cacert.crt
+        $ sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain cert.crt
+        $ rm -f cert.crt
+14. Reboot the machine. At this point, the gitlab user should be auto-logged
     and the runner process should be executing.  Congratulations, you're done!