diff --git a/kbs/src/lib.rs b/kbs/src/lib.rs
index 5d5177598..b46abf82f 100644
--- a/kbs/src/lib.rs
+++ b/kbs/src/lib.rs
@@ -240,7 +240,7 @@ impl ApiServer {
 
         #[cfg(feature = "resource")]
         let token_verifier =
-            crate::token::create_token_verifier(self.attestation_token_config.clone())?;
+            crate::token::create_token_verifier(self.attestation_token_config.clone()).await?;
 
         #[cfg(feature = "policy")]
         let policy_engine = PolicyEngine::new(&self.policy_engine_config).await?;
diff --git a/kbs/src/token/mod.rs b/kbs/src/token/mod.rs
index b0160ded3..19afed5b9 100644
--- a/kbs/src/token/mod.rs
+++ b/kbs/src/token/mod.rs
@@ -34,7 +34,7 @@ pub struct AttestationTokenVerifierConfig {
     pub trusted_certs_paths: Vec<String>,
 }
 
-pub fn create_token_verifier(
+pub async fn create_token_verifier(
     config: AttestationTokenVerifierConfig,
 ) -> Result<Arc<RwLock<dyn AttestationTokenVerifier + Send + Sync>>> {
     match config.attestation_token_type {