diff --git a/tier-1/manifest.yaml b/tier-1/manifest.yaml
index 5aee60e..de6afd5 100644
--- a/tier-1/manifest.yaml
+++ b/tier-1/manifest.yaml
@@ -4,7 +4,7 @@ recommends: true
 include:
   - manifest-tier-0.yaml
   - bootable-rpm-ostree.yaml
-  - dnf.yaml
+  - rpm-packaging.yaml
   - podman.yaml
   - firmware.yaml
   - networking-tools.yaml
diff --git a/tier-1/dnf.yaml b/tier-1/rpm-packaging.yaml
similarity index 58%
rename from tier-1/dnf.yaml
rename to tier-1/rpm-packaging.yaml
index 060c205..72ba24b 100644
--- a/tier-1/dnf.yaml
+++ b/tier-1/rpm-packaging.yaml
@@ -2,3 +2,5 @@
 # `dnf update` *client side* doesn't do much helpful...
 packages:
   - dnf
+  # To ensure we can enable client certs to access RHEL content
+  - subscription-manager