diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask
index 9c3c4b3929..2e188858ea 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask
@@ -1,5 +1,5 @@
 # We don't ship GnuTLS by default, and smartcard has a dep loop
-app-crypt/gnupg gnutls smartcard
+app-crypt/gnupg smartcard ssl
 
 # We don't need integration with cvs, perl, or subversion in git, so we can
 dev-vcs/git cvs perl subversion
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use
index 5b2159b5a3..18d3098f80 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/sdk/package.use
@@ -5,6 +5,9 @@ dev-vcs/git pcre
 dev-util/catalyst ccache
 dev-lang/python sqlite
 
+# Allow smartcard support in the SDK for image signing
+app-crypt/gnupg smartcard usb
+
 # for qemu
 app-arch/bzip2 static-libs
 app-emulation/qemu static-user