diff --git a/ci/cfengine-masterfiles-3.21.4-1.pkg.tar.gz.sha256 b/ci/cfengine-masterfiles-3.21.4-1.pkg.tar.gz.sha256
new file mode 100644
index 000000000..af35cc9a4
--- /dev/null
+++ b/ci/cfengine-masterfiles-3.21.4-1.pkg.tar.gz.sha256
@@ -0,0 +1 @@
+a4b35ad85ec14dda49b93c1c91a93e09f4336d9ee88cd6a3b27d323c90a279ca  cfengine-masterfiles-3.21.4-1.pkg.tar.gz
diff --git a/ci/setup-cfengine-build-host.sh b/ci/setup-cfengine-build-host.sh
index ef5cbb0c5..6d7059726 100755
--- a/ci/setup-cfengine-build-host.sh
+++ b/ci/setup-cfengine-build-host.sh
@@ -2,7 +2,7 @@
 shopt -s expand_aliases
 
 # TODO get latest LTS dynamically
-CFE_VERSION=3.21.5
+CFE_VERSION=3.21.4
 
 # install needed packages and software for a build host
 set -ex
@@ -107,6 +107,7 @@ else
 
   sha256sum --check ./buildscripts/ci/quick-install-cfengine-enterprise.sh.sha256
   chmod +x quick-install-cfengine-enterprise.sh
+  export CFEngine_Enterprise_Package_Version="$CFE_VERSION"
   bash ./quick-install-cfengine-enterprise.sh agent
 fi