diff --git a/dstack/kms/src/main.rs b/dstack/kms/src/main.rs
index 478c5c52a..76bac9ade 100644
--- a/dstack/kms/src/main.rs
+++ b/dstack/kms/src/main.rs
@@ -64,7 +64,7 @@ async fn run_onboard_service(kms_config: KmsConfig, figment: Figment) -> Result<
     // Remove section tls
 
     let _ = rocket::custom(figment)
-        .mount("/", rocket::routes![index, finish])
+        .mount("/", rocket::routes![index, finish, health])
         .mount(
             "/prpc",
             ra_rpc::prpc_routes!(OnboardState, OnboardHandler, trim: "Onboard."),
@@ -76,6 +76,11 @@ async fn run_onboard_service(kms_config: KmsConfig, figment: Figment) -> Result<
     Ok(())
 }
 
+#[rocket::get("/health")]
+fn health() -> RawText<&'static str> {
+    RawText("OK")
+}
+
 #[rocket::get("/metrics")]
 fn metrics(state: &State<KmsState>) -> RawText<String> {
     RawText(state.metrics().render_prometheus())
@@ -180,6 +185,7 @@ async fn main() -> Result<()> {
             "/prpc",
             ra_rpc::prpc_routes!(KmsState, RpcHandler, trim: "KMS."),
         )
+        .mount("/", rocket::routes![health])
         .manage(state.clone());
 
     if metrics_enabled {