diff --git a/Plugins/EtcdDriverPlugin/EtcdHttpClient.swift b/Plugins/EtcdDriverPlugin/EtcdHttpClient.swift
index fbfea0968..fdd1bb7be 100644
--- a/Plugins/EtcdDriverPlugin/EtcdHttpClient.swift
+++ b/Plugins/EtcdDriverPlugin/EtcdHttpClient.swift
@@ -1066,7 +1066,8 @@ internal final class EtcdHttpClient: @unchecked Sendable {
             guard status == errSecSuccess,
                   let itemArray = items as? [[String: Any]],
                   let firstItem = itemArray.first,
-                  let identityRef = firstItem[kSecImportItemIdentity as String] else {
+                  let identityRef = firstItem[kSecImportItemIdentity as String],
+                  CFGetTypeID(identityRef as CFTypeRef) == SecIdentityGetTypeID() else {
                 completionHandler(.cancelAuthenticationChallenge, nil)
                 return
             }