diff --git a/internal/cli/join.go b/internal/cli/join.go
index d3cc12e..b5d779c 100644
--- a/internal/cli/join.go
+++ b/internal/cli/join.go
@@ -95,7 +95,8 @@ func JoinCluster(leaderAPI, advertiseAddr, nodeName, leaderCACert string, pkiDir
 		// Configure TLS
 		client.Transport = &http.Transport{
 			TLSClientConfig: &tls.Config{
-				RootCAs: caCertPool,
+				RootCAs:            caCertPool,
+				InsecureSkipVerify: true, // Skip hostname verification for initial join
 			},
 		}
 	} else {