diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml
index a431cbf..4a5f73d 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml
@@ -47,7 +47,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-bba80526cea899b1947578419a14c74492ea501f"
+    tag: "r-e9d20834b307ebc17e96ed1758a8a8022b4530c1"
     dir: "DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1"
     credentials: "git-credentials"
   keystores:
@@ -59,6 +59,7 @@ spec:
   - "ob-proxy-v1-ob-realm-signer-trust"
   - "ob-proxy-v1-ob-mock-me-realm-tls-trust"
   - "ob-proxy-v1-ob-mock-me-realm-signer-trust"
+  - "ob-proxy-v1-agov-work-internal-trust-store"
   ingresses:
   - "ob-proxy-v1"
   podSecurity:
diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-v1-agov-work-internal-trust-store-b4d2da2fa2d0b060752a1fe2.yaml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-v1-agov-work-internal-trust-store-b4d2da2fa2d0b060752a1fe2.yaml
new file mode 100644
index 0000000..bedbcb4
--- /dev/null
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-v1-agov-work-internal-trust-store-b4d2da2fa2d0b060752a1fe2.yaml
@@ -0,0 +1,14 @@
+apiVersion: "operator.nevis-security.ch/v1"
+kind: "NevisTrustStore"
+metadata:
+  name: "ob-proxy-v1-agov-work-internal-trust-store"
+  namespace: "adn-agov-nevisidm-ob-01-uat"
+  labels:
+    deploymentTarget: "ob-proxy-v1"
+  annotations:
+    projectKey: "DEFAULT-ADN-AGOV-WORK-OB-PROJECT"
+    patternId: "b4d2da2fa2d0b060752a1fe2"
+spec:
+  keystores: []
+  extraCerts:
+  - "-----BEGIN CERTIFICATE-----\nMIIBcTCCARagAwIBAgIQWRl1eifIt8yohQYzh6yr/jAKBggqhkjOPQQDAjAYMRYw\nFAYDVQQDEw1zZWxmc2lnbmVkLWNhMB4XDTIzMDYyODE0MzI0MFoXDTQzMDYyODE0\nMzI0MFowGDEWMBQGA1UEAxMNc2VsZnNpZ25lZC1jYTBZMBMGByqGSM49AgEGCCqG\nSM49AwEHA0IABEwcjsIhSyyh0i9zP1G7ReOkFt/djzlGoUtSd5v3ZEk5QoZYjfl9\n04HdaZzrmveB2aRppbXgW7//s2Ma8wTd5uejQjBAMA4GA1UdDwEB/wQEAwICpDAP\nBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7YRoWIjHwkvFicwvk0Tx/yA4uUTAK\nBggqhkjOPQQDAgNJADBGAiEAgyg9t0qgb+czuscs07pNGI+12BedrD+y71psIlqx\nt2UCIQC/85UXyjYI9zg7Mg7rROTbGNCU3Jq/KIC3VzbbD+68VA==\n-----END CERTIFICATE-----\n"
diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml
index 446071f..96d58e2 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml
@@ -398,7 +398,7 @@
     <listener>
         <listener-class>ch::nevis::isiweb4::listener::SessionListener</listener-class>
     </listener>
-    <!-- source: pattern://bcfcb6808653a4ca9054146b, pattern://bcfcb6808653a4ca9054146b#allowedMethods, pattern://bcfcb6808653a4ca9054146b#backends, pattern://bcfcb6808653a4ca9054146b#responseRewrite -->
+    <!-- source: pattern://bcfcb6808653a4ca9054146b, pattern://bcfcb6808653a4ca9054146b#allowedMethods, pattern://bcfcb6808653a4ca9054146b#backends, pattern://bcfcb6808653a4ca9054146b#responseRewrite, pattern://bcfcb6808653a4ca9054146b#truststore -->
     <servlet>
         <servlet-name>Connector_ArtifactResolutionService</servlet-name>
         <!-- source: pattern://bcfcb6808653a4ca9054146b -->
@@ -428,6 +428,16 @@
             <param-name>InetAddress</param-name>
             <param-value>auth.adn-agov-nevisidm-01-uat:8991</param-value>
         </init-param>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b#truststore -->
+        <init-param>
+            <param-name>SSLCACertificateFile</param-name>
+            <param-value>/var/opt/keys/trust/ob-proxy-v1-agov-work-internal-trust-store/truststore.pem</param-value>
+        </init-param>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b -->
+        <init-param>
+            <param-name>SSLSNISupport</param-name>
+            <param-value>true</param-value>
+        </init-param>
         <!-- source: pattern://bcfcb6808653a4ca9054146b#backends -->
         <init-param>
             <param-name>UseSSL</param-name>