diff --git a/defaults/main.yml b/defaults/main.yml
index 29730e6..1e64baa 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -129,6 +129,8 @@ tacker_service_publicuri_proto: "{{ openstack_service_publicuri_proto | default(
 tacker_service_adminuri_proto: "{{ openstack_service_adminuri_proto | default(tacker_service_proto) }}"
 tacker_service_internaluri_proto: "{{ openstack_service_internaluri_proto | default(tacker_service_proto) }}"
 
+## Barbican service
+barbican_keys_backend: false
 
 #NOTE:  move password to tests/test-vars.yml
 tacker_service_password: password
diff --git a/templates/tacker.conf.j2 b/templates/tacker.conf.j2
index 9bc54dc..892b367 100644
--- a/templates/tacker.conf.j2
+++ b/templates/tacker.conf.j2
@@ -103,6 +103,7 @@ mgmt_driver = noop,openwrt
 monitor_driver = ping, http_ping
 
 [vim_keys]
+use_barbican = {{ barbican_keys_backend | bool }}
 openstack = {{ tacker_etc_dir }}/vim/fernet_keys
 
 [oslo_messaging_rabbit]