diff --git a/elements/puppet-stack-config/puppet-stack-config.yaml.template b/elements/puppet-stack-config/puppet-stack-config.yaml.template
index 7cb18cbca..1542f1c09 100644
--- a/elements/puppet-stack-config/puppet-stack-config.yaml.template
+++ b/elements/puppet-stack-config/puppet-stack-config.yaml.template
@@ -215,6 +215,7 @@ keystone::rabbit_userid: {{UNDERCLOUD_RABBIT_USERNAME}}
 keystone::rabbit_password: {{UNDERCLOUD_RABBIT_PASSWORD}}
 keystone::rabbit_host: {{LOCAL_IP}}
 keystone::enable_credential_setup: true
+keystone::fernet_max_active_keys: 2
 
 # MySQL
 admin_password: {{UNDERCLOUD_ADMIN_PASSWORD}}