diff --git a/roles/pki/tasks/main.yml b/roles/pki/tasks/main.yml
index 1969340..96c60f0 100644
--- a/roles/pki/tasks/main.yml
+++ b/roles/pki/tasks/main.yml
@@ -17,6 +17,7 @@
   command: "openssl x509 -in /srv/ca/certs/ca.crt -noout -hash"
   delegate_to: localhost
   register: result
+  changed_when: false
 - name: store ca certificate hash
   set_fact:
     pki_cacert_hash: "{{ result.stdout }}"