diff --git a/attestation-agent/kbs_protocol/src/bin/trustee-attester/main.rs b/attestation-agent/kbs_protocol/src/bin/trustee-attester/main.rs
index 4629e159e..1c9f10e2a 100644
--- a/attestation-agent/kbs_protocol/src/bin/trustee-attester/main.rs
+++ b/attestation-agent/kbs_protocol/src/bin/trustee-attester/main.rs
@@ -80,6 +80,7 @@ async fn main() -> Result<()> {
                 true => path,
             };
             let resource = ResourceUri::new("", &resource_path)?;
+            let (_token, _key) = client.get_token().await?; // attest first
             let resource_bytes = client.get_resource(resource).await?;
 
             println!("{}", STANDARD.encode(resource_bytes));