diff --git a/deployment/nova/nova-libvirt-container-puppet.yaml b/deployment/nova/nova-libvirt-container-puppet.yaml
index 2b2be2c153..1bbfadef39 100644
--- a/deployment/nova/nova-libvirt-container-puppet.yaml
+++ b/deployment/nova/nova-libvirt-container-puppet.yaml
@@ -218,6 +218,11 @@ parameters:
                  https://libvirt.org/logging.html .
     type: string
     default: '1:libvirt 1:qemu 1:conf 1:security 3:event 3:json 3:file 3:object 1:util'
+  LibvirtTLSPriority:
+    description: >
+      Override the compile time default TLS priority string.
+    type: string
+    default: 'NORMAL:-VERS-SSL3.0:-VERS-TLS-ALL:+VERS-TLS1.2'
 
 conditions:
 
@@ -404,6 +409,7 @@ outputs:
                 generate_service_certificates: true
                 tripleo::profile::base::nova::migration::client::libvirt_tls: true
                 tripleo::profile::base::nova::libvirt::tls_password: {get_param: [LibvirtTLSPassword]}
+                nova::compute::libvirt::tls_priority: {get_param: LibvirtTLSPriority}
                 nova::migration::libvirt::listen_address:
                   str_replace:
                      template:
diff --git a/releasenotes/notes/nova_libvirtd_tls_priority-d0129f804d7ca847.yaml b/releasenotes/notes/nova_libvirtd_tls_priority-d0129f804d7ca847.yaml
new file mode 100644
index 0000000000..de76d139d2
--- /dev/null
+++ b/releasenotes/notes/nova_libvirtd_tls_priority-d0129f804d7ca847.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - |
+    Adds LibvirtTLSPriority parameter to override the compile time default TLS
+    priority string. Default: 'NORMAL:-VERS-SSL3.0:-VERS-TLS-ALL:+VERS-TLS1.2'