diff --git a/alpine/kasmvncserver/APKBUILD b/alpine/kasmvncserver/APKBUILD
index f3fa72c..52b08c3 100644
--- a/alpine/kasmvncserver/APKBUILD
+++ b/alpine/kasmvncserver/APKBUILD
@@ -10,11 +10,13 @@ url="https://github.com/kasmtech/KasmVNC"
 arch="x86_64"
 license="GPL-2.0-or-later"
 depends="
+        bash
         libgomp
         libjpeg-turbo
         libwebp
         libxfont2
         libxshmfence
+        mcookie
         mesa-gbm
         pciutils-libs
         perl
@@ -37,7 +39,6 @@ depends="
         xkbcomp
         xkeyboard-config
         xterm
-        bash
 				"
 makedepends="
             rsync
@@ -46,7 +47,7 @@ makedepends="
             libxcursor
             "
 checkdepends=""
-install=""
+install="$pkgname.post-install $pkgname.post-deinstall"
 subpackages=""
 source=""
 builddir="$srcdir/"
@@ -91,6 +92,10 @@ package() {
 	rsync -r --links --safe-links --exclude '.git*' --exclude po2js \
 		--exclude xgettext-html --exclude www/utils/ --exclude .eslintrc \
 	  $SRC/share/kasmvnc $pkgdir/usr/share;
+  sed -i -e 's!pem_certificate: .\+$!pem_certificate: /etc/ssl/private/kasmvnc.pem!' \
+      $DESTDIR/usr/share/kasmvnc/kasmvnc_defaults.yaml
+  sed -i -e 's!pem_key: .\+$!pem_key: /etc/ssl/private/kasmvnc.pem!' \
+    $DESTDIR/usr/share/kasmvnc/kasmvnc_defaults.yaml
 	sed -e 's/^\([^#]\)/# \1/' $SRC/share/kasmvnc/kasmvnc_defaults.yaml > \
 	  $pkgdir/etc/kasmvnc/kasmvnc.yaml;
 	# cp $SRC/man/man1/Xvnc.1 $pkgdir/usr/share/man/man1/Xkasmvnc.1
diff --git a/alpine/kasmvncserver/kasmvncserver.post-deinstall b/alpine/kasmvncserver/kasmvncserver.post-deinstall
new file mode 100755
index 0000000..b30760c
--- /dev/null
+++ b/alpine/kasmvncserver/kasmvncserver.post-deinstall
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+rm -f /etc/ssl/private/kasmvnc.pem
diff --git a/alpine/kasmvncserver/kasmvncserver.post-install b/alpine/kasmvncserver/kasmvncserver.post-install
new file mode 100755
index 0000000..1d9f546
--- /dev/null
+++ b/alpine/kasmvncserver/kasmvncserver.post-install
@@ -0,0 +1,26 @@
+#!/bin/bash
+
+set -e
+
+kasmvnc_group="kasmvnc-cert"
+
+create_kasmvnc_group() {
+  if ! getent group "$kasmvnc_group" >/dev/null; then
+    addgroup --system "$kasmvnc_group"
+  fi
+}
+
+make_self_signed_certificate() {
+  local cert_file=/etc/ssl/private/kasmvnc.pem
+  [ -f "$cert_file" ] && return 0
+
+  openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+    -keyout "$cert_file" \
+    -out "$cert_file" -subj \
+    "/C=US/ST=VA/L=None/O=None/OU=DoFu/CN=kasm/emailAddress=none@none.none"
+  chgrp "$kasmvnc_group" "$cert_file"
+  chmod 640 "$cert_file"
+}
+
+create_kasmvnc_group
+make_self_signed_certificate