diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml
index 626fb5b8..ef5d2a94 100644
--- a/.github/workflows/acceptance.yml
+++ b/.github/workflows/acceptance.yml
@@ -101,11 +101,22 @@ jobs:
       - uses: opentofu/setup-opentofu@9d84900f3238fab8cd84ce47d658d25dd008be2f # v1.0.8
         with:
           tofu_version: ${{ matrix.opentofu-version }}
+          tofu_wrapper: false
+      # Point the test framework at the tofu binary. Without this it tries to
+      # DOWNLOAD Terraform CLI, which currently fails in hc-install v0.6.3
+      # ("openpgp: key expired" — stale HashiCorp release-signing key), and the
+      # job would not actually be testing OpenTofu anyway.
+      - name: Resolve OpenTofu binary path
+        id: tofu-path
+        run: echo "path=$(which tofu)" >> "$GITHUB_OUTPUT"
       - name: Run acceptance test
         env:
           CLOUDSTACK_USER_ID: ${{ steps.setup-cloudstack.outputs.CLOUDSTACK_USER_ID }}
           CLOUDSTACK_API_KEY: ${{ steps.setup-cloudstack.outputs.CLOUDSTACK_API_KEY }}
           CLOUDSTACK_SECRET_KEY: ${{ steps.setup-cloudstack.outputs.CLOUDSTACK_SECRET_KEY }}
+          TF_ACC_TERRAFORM_PATH: ${{ steps.tofu-path.outputs.path }}
+          TF_ACC_PROVIDER_NAMESPACE: hashicorp
+          TF_ACC_PROVIDER_HOST: registry.opentofu.org
         run: |
           make testacc
     services: