diff --git a/freeipa.spec b/freeipa.spec
index d8abf10..17dcc1e 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -364,6 +364,7 @@ Requires(post): selinux-policy-base >= %{selinux_policy_version}
 Requires: slapi-nis >= %{slapi_nis_version}
 Requires: pki-ca >= %{pki_version}
 Requires: pki-kra >= %{pki_version}
+Requires: pki-symkey >= %{pki_version}
 Requires(preun): systemd-units
 Requires(postun): systemd-units
 Requires: policycoreutils >= 2.1.12-5
@@ -1722,6 +1723,7 @@ fi
 %changelog
 * Wed Mar 21 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre1-6.1
 - Change upgrade code to use DIR-based ccache and no kinit (#1558818)
+- Require pki-symkey until pki-core has proper dependencies
 
 * Wed Mar 21 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre1-6
 - Change upgrade code to use DIR-based ccache and no kinit (#1558818)