diff --git a/nixos/modules/virtualisation/waagent.nix b/nixos/modules/virtualisation/waagent.nix
index afdcfd6ebe35..e3436a21d9c2 100644
--- a/nixos/modules/virtualisation/waagent.nix
+++ b/nixos/modules/virtualisation/waagent.nix
@@ -192,6 +192,15 @@ let
             If set to `null`, the system defaults are used.
           '';
         };
+
+        OpensslPath = lib.mkOption {
+          type = types.nullOr types.path;
+          default = lib.getExe pkgs.openssl;
+          defaultText = literalExpression "lib.getExe pkgs.openssl";
+          description = ''
+            Specify a path for the openssl binary to use for cryptographic operations.
+          '';
+        };
       };
 
       HttpProxy = {