diff --git a/protogeni/etc/protogeni.sql b/protogeni/etc/protogeni.sql
index 7a2de744cccbbc6da0561937fb3d805694b811f9..ed09842e0e5e65ef39770b3752a0ef34f328546b 100644
--- a/protogeni/etc/protogeni.sql
+++ b/protogeni/etc/protogeni.sql
@@ -178,6 +178,16 @@ CREATE TABLE `geni_crls` (
   PRIMARY KEY  (`uuid`)
 ) ENGINE=MyISAM DEFAULT CHARSET=latin1;
 
+DROP TABLE IF EXISTS `geni_cas`;
+CREATE TABLE `geni_cas` (
+  `hash` varchar(40) NOT NULL default '',
+  `created` datetime default NULL,
+  `cert` text,
+  `DN` text,
+  PRIMARY KEY  (`hash`),
+  INDEX `DN` (`DN`(255))
+) ENGINE=MyISAM DEFAULT CHARSET=latin1;
+
 CREATE TABLE `geni_manifests` (
   `idx` int(10) unsigned NOT NULL auto_increment,
   `slice_uuid` varchar(40) NOT NULL default '',
diff --git a/protogeni/updates/22 b/protogeni/updates/22
new file mode 100644
index 0000000000000000000000000000000000000000..634fdac0fb8f82d06be5d7aa7b2a959c19b9bf90
--- /dev/null
+++ b/protogeni/updates/22
@@ -0,0 +1,29 @@
+#
+# Add a geni_cas table, for use by the CH only.
+#
+use strict;
+use GeniDB;
+
+sub DoUpdate($$$)
+{
+    my ($dbhandle, $dbname, $version) = @_;
+
+    DBSetDefault($dbhandle);
+
+    if (!DBTableExists("geni_cas")) {
+	DBQueryFatal("CREATE TABLE `geni_cas` ( ".
+		     " `hash` varchar(40) NOT NULL default '', ".
+		     " `created` datetime default NULL, ".
+		     " `cert` text, ".
+		     " `DN` text, ".
+		     " PRIMARY KEY  (`hash`), ".
+		     " INDEX `DN` (`DN`(255)) ".
+		     ") ENGINE=MyISAM DEFAULT CHARSET=latin1");
+    }
+    return 0;
+}
+1;
+
+# Local Variables:
+# mode:perl
+# End: