diff --git a/private/system_server.te b/private/system_server.te
index 115aff3..06673c3 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -871,6 +871,15 @@
 	use
 };
 
+# Allow Wifi module to manage Wi-Fi keys.
+allow system_server wifi_key:keystore2_key {
+	delete
+	get_info
+	rebind
+	update
+	use
+};
+
 # Allow system server to search and write to the persistent factory reset
 # protection partition. This block device does not get wiped in a factory reset.
 allow system_server block_device:dir search;