diff --git a/nodepool/elements/nodepool-base/finalise.d/99-unbound b/nodepool/elements/nodepool-base/finalise.d/99-unbound
index f4fbb135dd..b04ad7d772 100755
--- a/nodepool/elements/nodepool-base/finalise.d/99-unbound
+++ b/nodepool/elements/nodepool-base/finalise.d/99-unbound
@@ -48,6 +48,10 @@ sed -i -e 's/^\(DNS[0-9]*=[.0-9]\+\)/#\1/g' /etc/sysconfig/network-scripts/ifcfg
 set -e
 
 echo 'nameserver 127.0.0.1' > /etc/resolv.conf
+if type dpkg-reconfigure >/dev/null 2>&1 && ! test -f /etc/ssh/ssh_host_rsa_key
+then
+    dpkg-reconfigure openssh-server
+fi
 
 exit 0
 EOF
diff --git a/nodepool/scripts/prepare_node.sh b/nodepool/scripts/prepare_node.sh
index 9eea6f97c1..bf47aa6284 100755
--- a/nodepool/scripts/prepare_node.sh
+++ b/nodepool/scripts/prepare_node.sh
@@ -110,6 +110,10 @@ sed -i -e 's/^\(DNS[0-9]*=[.0-9]\+\)/#\1/g' /etc/sysconfig/network-scripts/ifcfg
 set -e
 
 echo 'nameserver 127.0.0.1' > /etc/resolv.conf
+if type dpkg-reconfigure >/dev/null 2>&1 && ! test -f /etc/ssh/ssh_host_rsa_key
+then
+    dpkg-reconfigure openssh-server
+fi
 
 exit 0
 EOF