diff --git a/pkg/asset/manifests/cloudproviderconfig.go b/pkg/asset/manifests/cloudproviderconfig.go
index 3f24951d8b7..74040500e2c 100644
--- a/pkg/asset/manifests/cloudproviderconfig.go
+++ b/pkg/asset/manifests/cloudproviderconfig.go
@@ -153,6 +153,10 @@ func (cpc *CloudProviderConfig) Generate(dependencies asset.Parents) error {
 				return errors.Wrap(err, "could not serialize Azure Stack endpoints")
 			}
 			cm.Data[cloudProviderEndpointsKey] = string(b)
+
+			if trustBundle := installConfig.Config.AdditionalTrustBundle; trustBundle != "" {
+				cm.Data[cloudProviderConfigCABundleDataKey] = trustBundle
+			}
 		}
 	case gcptypes.Name:
 		subnet := fmt.Sprintf("%s-worker-subnet", clusterID.InfraID)