diff --git a/security/huks/include/native_huks_api.h b/security/huks/include/native_huks_api.h
index 47ed4b47c60559568c4788bdd8715347ee9a9bf7..eb7a334f02e27b882aaab3625a3c1f631cc73c17 100644
--- a/security/huks/include/native_huks_api.h
+++ b/security/huks/include/native_huks_api.h
@@ -171,6 +171,7 @@ struct OH_Huks_Result OH_Huks_IsKeyItemExist(const struct OH_Huks_Blob *keyAlias
 /**
  * @brief Obtain the key certificate chain.
  *
+ * @permission ohos.permission.ATTEST_KEY
  * @param keyAlias Indicates the pointer to the alias of the target key.
  * @param paramSet Indicates the pointer to the parameters required for obtaining the key certificate.
  * @param certChain Indicates the pointer to the key certificate chain obtained.