diff --git a/ipn/ipnlocal/local.go b/ipn/ipnlocal/local.go
index e78af02a5..1012f44ff 100644
--- a/ipn/ipnlocal/local.go
+++ b/ipn/ipnlocal/local.go
@@ -1287,6 +1287,10 @@ func (b *LocalBackend) Start(opts ipn.Options) error {
 	b.cc = cc
 	b.ccAuto, _ = cc.(*controlclient.Auto)
 	endpoints := b.endpoints
+
+	if err := b.initTKALocked(); err != nil {
+		b.logf("initTKALocked: %v", err)
+	}
 	var tkaHead string
 	if b.tka != nil {
 		head, err := b.tka.authority.Head().MarshalText()