diff --git a/container-images/kolla/base/uid_gid_manage.sh b/container-images/kolla/base/uid_gid_manage.sh
index 30bdc6e26..205489ca7 100755
--- a/container-images/kolla/base/uid_gid_manage.sh
+++ b/container-images/kolla/base/uid_gid_manage.sh
@@ -65,7 +65,7 @@ _SUPPORTED_USERS['openvswitch']='openvswitch 42476 42476'
 _SUPPORTED_USERS['panko']='panko 42438 42438 /var/lib/panko ceilometer,kolla'
 _SUPPORTED_USERS['placement']='placement 42482 42482 /var/lib/placement kolla'
 _SUPPORTED_USERS['qdrouterd']='qdrouterd 42465 42465 /var/lib/qdrouterd kolla'
-_SUPPORTED_USERS['qemu']='qemu 42427 42427'
+_SUPPORTED_USERS['qemu']='qemu 107 107'
 _SUPPORTED_USERS['rabbitmq']='rabbitmq 42439 42439 /var/lib/rabbitmq kolla'
 _SUPPORTED_USERS['redis']='redis 42460 42460 /run/redis kolla'
 _SUPPORTED_USERS['swift']='swift 42445 42445 /var/lib/swift kolla'
diff --git a/releasenotes/notes/qemu_user_id-32d8f17099a6f002.yaml b/releasenotes/notes/qemu_user_id-32d8f17099a6f002.yaml
new file mode 100644
index 000000000..5e16fc94f
--- /dev/null
+++ b/releasenotes/notes/qemu_user_id-32d8f17099a6f002.yaml
@@ -0,0 +1,10 @@
+---
+fixes:
+  - |
+    The qemu user on the host gets created using uid/gid 107. Certificates
+    on the host, but also the vhost-user sockets created by ovs use this
+    uid/gid. With the move to TCIB images the default kolla ids were
+    reverted and the previous overwrite dropped. This make e.g. the qemu
+    processes to fail to use the libvirt-vnc bind mounted certificates.
+    This change brings back the previous overwrite of the qemu user
+    uid/gid.