diff --git a/ipaserver/plugins/config.py b/ipaserver/plugins/config.py
index c88cb99b4..df6bd466a 100644
--- a/ipaserver/plugins/config.py
+++ b/ipaserver/plugins/config.py
@@ -255,6 +255,12 @@ class config(LDAPObject):
             doc=_('Renewal master for IPA certificate authority'),
             flags={'virtual_attribute', 'no_create'}
         ),
+        Str(
+            'pkinit_server_server*',
+            label=_('IPA master capable of PKINIT'),
+            doc=_('IPA master which can process PKINIT requests'),
+            flags={'virtual_attribute', 'no_create', 'no_update'}
+        ),
         Str(
             'ipadomainresolutionorder?',
             cli_name='domain_resolution_order',