diff --git a/tasks/freeradius_eap.yml b/tasks/freeradius_eap.yml
index 408a4ddd..43c18af9 100644
--- a/tasks/freeradius_eap.yml
+++ b/tasks/freeradius_eap.yml
@@ -1,5 +1,11 @@
 ---
 
+- name: Generate default DH key and certificates
+  command:
+    cmd: make destroycerts dh all
+    chdir: /etc/freeradius/certs
+  tags: [freeradius_eap]
+
 - name: "Copy {{ org.name }} EAP openwisp_site"
   template:
     src: "{{ freeradius_eap_openwisp_site_template_src }}"