diff --git a/debian/changelog b/debian/changelog
index f91a2ae..4707608 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
 shim (12+1501864225.b586175-0) UNRELEASED; urgency=medium
 
   * New upstream snapshot: 12+1501864225.b586175.
+  * debian/control: add a Build-Depends on libnss3-tools for pk12-util.
 
  -- Mathieu Trudel-Lapierre <cyphermox@ubuntu.com>  Fri, 04 Aug 2017 12:33:22 -0400
 
diff --git a/debian/control b/debian/control
index 06d4239..824230b 100644
--- a/debian/control
+++ b/debian/control
@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
 XSBC-Original-Maintainer: Steve Langasek <vorlon@debian.org>
 Standards-Version: 3.9.8
-Build-Depends: debhelper (>= 9), gnu-efi (>= 3.0u), sbsigntool, openssl
+Build-Depends: debhelper (>= 9), gnu-efi (>= 3.0u), sbsigntool, openssl, libnss3-tools
 Vcs-Bzr: lp:~ubuntu-core-dev/shim/trunk
 
 Package: shim