diff --git a/physical/consul.go b/physical/consul.go
index a3c36d928..c65ccf2b1 100644
--- a/physical/consul.go
+++ b/physical/consul.go
@@ -104,8 +104,6 @@ func setupTLSConfig(conf map[string]string) (*tls.Config, error) {
 		}
 
 		tlsClientConfig.Certificates = []tls.Certificate{tlsCert}
-	} else {
-		tlsClientConfig.InsecureSkipVerify = true
 	}
 
 	caPool := x509.NewCertPool()