diff --git a/embed.ipxe b/embed.ipxe
index b96f1e2..8d91359 100644
--- a/embed.ipxe
+++ b/embed.ipxe
@@ -190,6 +190,9 @@ goto static_ip_boot_setup
 
 :boot_all
 
+# Get accurate time so we can set the clock in kernel boot cmdline
+ntp pool.ntp.org || goto error_handler
+
 # We use HTTP because IPXE's HTTPS implementation is lacking. So we delegate
 #   integrity and validation to imgverify.
 
@@ -216,9 +219,6 @@ kernel https://images2.sysdeploy.org/${ubuntu-variant}/${arch-info}/boot-kernel
 imgverify --signer images.sysdeploy.org boot-kernel https://images2.sysdeploy.org/${ubuntu-variant}/${arch-info}/boot-kernel.sig || goto error_handler
 
 
-# Get accurate time so we can set the clock in kernel boot cmdline
-ntp pool.ntp.org || goto error_handler
-
 echo ip-info ${ip-info}
 
 sleep 1