diff --git a/command/server/listener_atlas.go b/command/server/listener_atlas.go
index f23502bd1d..92f70e9bae 100644
--- a/command/server/listener_atlas.go
+++ b/command/server/listener_atlas.go
@@ -56,5 +56,9 @@ func atlasListenerFactory(config map[string]string, logger io.Writer) (net.Liste
 		"infrastructure": scadaConfig.Atlas.Infrastructure,
 	}
 
+	// The outer connection is already TLS-enabled; this is just the listener
+	// that reaches back inside that connection
+	config["tls_disable"] = "1"
+
 	return listenerWrapTLS(ln, props, config)
 }