diff --git a/authority/tls.go b/authority/tls.go
index e1c72310..6b46ac54 100644
--- a/authority/tls.go
+++ b/authority/tls.go
@@ -372,6 +372,7 @@ func (a *Authority) Revoke(ctx context.Context, revokeOpts *RevokeOptions) error
 			SerialNumber: rci.Serial,
 			Reason:       rci.Reason,
 			ReasonCode:   rci.ReasonCode,
+			PassiveOnly:  revokeOpts.PassiveOnly,
 		})
 		if err != nil {
 			return errs.Wrap(http.StatusInternalServerError, err, "authority.Revoke", opts...)
diff --git a/cas/apiv1/requests.go b/cas/apiv1/requests.go
index bcda66a3..b47a9c13 100644
--- a/cas/apiv1/requests.go
+++ b/cas/apiv1/requests.go
@@ -86,6 +86,7 @@ type RevokeCertificateRequest struct {
 	SerialNumber string
 	Reason       string
 	ReasonCode   int
+	PassiveOnly  bool
 	RequestID    string
 }
 
diff --git a/cas/stepcas/stepcas.go b/cas/stepcas/stepcas.go
index 5f2acc9f..1befdc35 100644
--- a/cas/stepcas/stepcas.go
+++ b/cas/stepcas/stepcas.go
@@ -149,6 +149,7 @@ func (s *StepCAS) RevokeCertificate(req *apiv1.RevokeCertificateRequest) (*apiv1
 		ReasonCode: req.ReasonCode,
 		Reason:     req.Reason,
 		OTT:        token,
+		Passive:    req.PassiveOnly,
 	}, nil)
 	if err != nil {
 		return nil, err