diff --git a/default.nix b/default.nix
index 4988030..e5afb81 100644
--- a/default.nix
+++ b/default.nix
@@ -7,6 +7,7 @@
   shell = mkShell {
     inherit (import sources.niv {}) niv;
     buildInputs = [
+      cardanoNodeProject.cardano-cli   # required for KES key rotation
       niv
       nixops
     ];