diff --git a/cmd/step-ca/version_hsm.go b/cmd/step-ca/version_hsm.go
new file mode 100644
index 000000000..6aacb2071
--- /dev/null
+++ b/cmd/step-ca/version_hsm.go
@@ -0,0 +1,14 @@
+//go:build cgo
+
+package main
+
+import (
+	"github.com/smallstep/certificates/authority"
+	"github.com/smallstep/cli-utils/step"
+)
+
+func init() {
+	Version += "+hsm"
+	step.Set("Smallstep CA", Version, BuildTime)
+	authority.GlobalVersion.Version = Version
+}
diff --git a/cmd/step-ca/version_no_hsm.go b/cmd/step-ca/version_no_hsm.go
new file mode 100644
index 000000000..4c333e0b5
--- /dev/null
+++ b/cmd/step-ca/version_no_hsm.go
@@ -0,0 +1,5 @@
+//go:build !cgo
+
+package main
+
+// No HSM suffix when built without cgo.