diff --git a/package/system/ca-certificates/Makefile b/package/system/ca-certificates/Makefile
index 5b282c339e..17f88ad563 100644
--- a/package/system/ca-certificates/Makefile
+++ b/package/system/ca-certificates/Makefile
@@ -49,6 +49,8 @@ endef
 
 define Package/ca-certificates/install
 	$(INSTALL_DIR) $(1)/etc/ssl/certs
+	$(INSTALL_DIR) $(1)/etc/amx/tr181-security/defaults.d
+
 	$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/share/ca-certificates/*/*.crt $(1)/etc/ssl/certs/
 
 	for CERTFILE in `ls -1 $(1)/etc/ssl/certs`; do \
@@ -59,6 +61,7 @@ define Package/ca-certificates/install
 		done ; \
 		$(LN) "$$$$CERTFILE" "$(1)/etc/ssl/certs/$$$$HASH.$$$$SUFFIX" ; \
 	done
+	$(CP) ./files/00_default_ca-certificates.odl $(1)/etc/amx/tr181-security/defaults.d/
 endef
 
 define Package/ca-bundle/install
diff --git a/package/system/ca-certificates/files/00_default_ca-certificates.odl b/package/system/ca-certificates/files/00_default_ca-certificates.odl
new file mode 100644
index 0000000000..e9120abd6c
--- /dev/null
+++ b/package/system/ca-certificates/files/00_default_ca-certificates.odl
@@ -0,0 +1,10 @@
+%populate {
+    object Security.CABundle {
+        instance add ("default") {
+            parameter Enable = true;
+            parameter Name = "default";
+            parameter CADirURI = "file:///etc/ssl/certs";
+            parameter CAFileURI = "file:///etc/ssl/certs/ca-certificates.crt";
+        }
+    }
+}