diff --git a/physical/etcd/etcd2.go b/physical/etcd/etcd2.go
index <HASH>..<HASH> 100644
--- a/physical/etcd/etcd2.go
+++ b/physical/etcd/etcd2.go
@@ -138,9 +138,9 @@ func newEtcdV2Client(conf map[string]string) (client.Client, error) {
 	if (hasCert && hasKey) || hasCa {
 		var transportErr error
 		tls := transport.TLSInfo{
-			CAFile:   ca,
-			CertFile: cert,
-			KeyFile:  key,
+			TrustedCAFile: ca,
+			CertFile:      cert,
+			KeyFile:       key,
 		}
 		cTransport, transportErr = transport.NewTransport(tls, 30*time.Second)
 
diff --git a/physical/etcd/etcd3.go b/physical/etcd/etcd3.go
index <HASH>..<HASH> 100644
--- a/physical/etcd/etcd3.go
+++ b/physical/etcd/etcd3.go
@@ -86,9 +86,9 @@ func newEtcd3Backend(conf map[string]string, logger log.Logger) (physical.Backen
 	ca, hasCa := conf["tls_ca_file"]
 	if (hasCert && hasKey) || hasCa {
 		tls := transport.TLSInfo{
-			CAFile:   ca,
-			CertFile: cert,
-			KeyFile:  key,
+			TrustedCAFile: ca,
+			CertFile:      cert,
+			KeyFile:       key,
 		}
 
 		tlscfg, err := tls.ClientConfig()
Update to TrustedCAFile for etcd as CAFile is deprecated and removed in latest libs