diff --git a/private/buf/bufcli/bufcli.go b/private/buf/bufcli/bufcli.go
index 903d873e47..74fe525baa 100644
--- a/private/buf/bufcli/bufcli.go
+++ b/private/buf/bufcli/bufcli.go
@@ -552,8 +552,13 @@ func NewConfig(container appflag.Container) (*bufapp.Config, error) {
 
 // NewRegistryProvider creates a new registryv1alpha1apiclient.Provider.
 func NewRegistryProvider(ctx context.Context, container appflag.Container) (registryv1alpha1apiclient.Provider, error) {
+	config, err := NewConfig(container)
+	if err != nil {
+		return nil, err
+	}
 	client := http2client.NewClient(
 		http2client.WithObservability(),
+		http2client.WithTLSConfig(config.TLS),
 	)
 	options := []bufapiclient.RegistryProviderOption{
 		bufapiclient.RegistryProviderWithGRPC(),