diff --git a/lib/hdb/hdb.asn1 b/lib/hdb/hdb.asn1
index 9eb419880..46a9ef2cd 100644
--- a/lib/hdb/hdb.asn1
+++ b/lib/hdb/hdb.asn1
@@ -18,14 +18,16 @@ Event ::= SEQUENCE {
 }
 
 HDBFlags ::= BIT STRING {
-	initial(0),	-- require as-req
-	forwardable(1),	-- may issue forwardable
-	proxiable(2),	-- may issue proxiable
-	renewable(3),	-- may issue renewable
-	postdate(4),	-- may issue postdatable
-	server(5),	-- may be server
-	client(6),	-- may be client
-	invalid(7)	-- entry is invalid
+	initial(0),		-- require as-req
+	forwardable(1),		-- may issue forwardable
+	proxiable(2),		-- may issue proxiable
+	renewable(3),		-- may issue renewable
+	postdate(4),		-- may issue postdatable
+	server(5),		-- may be server
+	client(6),		-- may be client
+	invalid(7),		-- entry is invalid
+	require-preauth(8),	-- must use preauth
+	change-pw(9)		-- change password service
 }