diff --git a/upup/pkg/fi/cloudup/apply_cluster.go b/upup/pkg/fi/cloudup/apply_cluster.go
index ba2bba6345..476d97cce2 100644
--- a/upup/pkg/fi/cloudup/apply_cluster.go
+++ b/upup/pkg/fi/cloudup/apply_cluster.go
@@ -1063,6 +1063,11 @@ func (c *ApplyClusterCmd) addFileAssets(assetBuilder *assets.AssetBuilder) error
 				}
 			} else {
 				klog.Warningf("Using url from LYFT_VPC_DOWNLOAD_URL env var: %q", urlString)
+				hashString := os.Getenv("LYFT_VPC_DOWNLOAD_HASH")
+				hash, err = hashing.FromString(hashString)
+				if err != nil {
+					return fmt.Errorf("invalid hash supplied for lyft: %q", hashString)
+				}
 			}
 
 			u, err := url.Parse(urlString)