diff --git a/lib/transactional.pm b/lib/transactional.pm
index 81081c6212bb..e104959e81c5 100644
--- a/lib/transactional.pm
+++ b/lib/transactional.pm
@@ -39,6 +39,7 @@ our @EXPORT = qw(
   exit_trup_shell_and_reboot
   reboot_on_changes
   record_kernel_audit_messages
+  install_internal_certificate
 );
 
 # Download files needed for transactional update tests
@@ -378,6 +379,20 @@ sub reboot_on_changes {
     else {
         record_info("No reboot needed", "Reboot saved because there are no changes happened and no new snapshot generated");
     }
+
+=head2 install_internal_certificate
+
+  install_internal_certificate
+
+Install SUSE cerificate for internal repositories.
+
+=cut
+
+sub install_internal_certificate {
+    script_retry('curl -k https://ca.suse.de/certificates/ca/SUSE_Trust_Root.crt -o /etc/pki/trust/anchors/SUSE_Trust_Root.crt', timeout => 100, delay => 30, retry => 5);
+    script_retry('pgrep update-ca-certificates', retry => 5, delay => 2, die => 0);
+    assert_script_run 'update-ca-certificates -v';
+    }
 }
 
 1;
diff --git a/tests/transactional/install_updates.pm b/tests/transactional/install_updates.pm
index 1845aed41da2..a13314abde27 100644
--- a/tests/transactional/install_updates.pm
+++ b/tests/transactional/install_updates.pm
@@ -22,9 +22,7 @@ sub run {
     select_serial_terminal;
 
     if (is_sle_micro) {
-        script_retry('curl -k https://ca.suse.de/certificates/ca/SUSE_Trust_Root.crt -o /etc/pki/trust/anchors/SUSE_Trust_Root.crt', timeout => 100, delay => 30, retry => 5);
-        script_retry('pgrep update-ca-certificates', retry => 5, delay => 2, die => 0);
-        assert_script_run 'update-ca-certificates -v';
+        install_internal_certificate;
 
         # Clean the journal to avoid capturing bugs that are fixed after installing updates
         assert_script_run('journalctl --no-pager -o short-precise | tail -n +2 > /tmp/journal_before');