diff --git a/service/ci/azure-pipelines/jobs/client_test_insecure.yml b/service/ci/azure-pipelines/jobs/client_test_insecure.yml
new file mode 100644
index 0000000..13d7737
--- /dev/null
+++ b/service/ci/azure-pipelines/jobs/client_test_insecure.yml
@@ -0,0 +1,56 @@
+#
+# Azure Pipelines steps to run service/test/client_test.py with the insecure debug-mode enclave built in the enclave CI pipeline
+#
+
+jobs:
+- job: client_test_insecure
+  displayName: client_test_insecure
+  pool: client_test
+  workspace:
+    clean: all
+  steps:
+  - checkout: none
+
+  - task: DownloadPipelineArtifact@2
+    inputs:
+      artifact:   insecure-libkbupd_enclave.hardened.debug.so
+      path:       .
+      source:     specific
+      project:    '$(System.TeamProjectId)'
+      pipeline:   6
+      runVersion: latestFromBranch
+      runBranch:  '$(Build.SourceBranch)'
+      preferTriggeringPipeline: true
+
+  - task: DownloadPipelineArtifact@2
+    inputs:
+      artifact: kbupd
+      path:     .
+  - task: DownloadPipelineArtifact@2
+    inputs:
+      artifact: kbupctl
+      path:     .
+  - task: DownloadPipelineArtifact@2
+    inputs:
+      artifact: kbuptlsd
+      path:     .
+  - task: DownloadPipelineArtifact@2
+    inputs:
+      artifact: client_test
+      path:     .
+  - task: DownloadPipelineArtifact@2
+    inputs:
+      artifact: client_test_config
+      path:     .
+
+  - script: |
+      chmod +x kbupd kbupctl kbuptlsd
+    displayName: set up client_test
+
+  - script: sha256sum libkbupd_enclave.hardened.debug.so
+
+  - script: python3 client_test.py
+    displayName:      client_test.py
+    timeoutInMinutes: 30
+    env:
+      ENCLAVE_DEBUG:  yes
diff --git a/service/ci/azure-pipelines/master.yml b/service/ci/azure-pipelines/master.yml
index 18602b2..26c31e7 100644
--- a/service/ci/azure-pipelines/master.yml
+++ b/service/ci/azure-pipelines/master.yml
@@ -40,6 +40,12 @@ stages:
   jobs:
   - template: jobs/make_all.yml
 
+- stage: client_test_insecure
+  displayName: client_test_insecure
+  dependsOn: make_all
+  jobs:
+  - template: jobs/client_test_insecure.yml
+
 - stage: client_test
   displayName: client_test
   dependsOn: make_all