diff --git a/deployment/securetty/securetty-baremetal-puppet.yaml b/deployment/deprecated/securetty/securetty-baremetal-puppet.yaml
similarity index 100%
rename from deployment/securetty/securetty-baremetal-puppet.yaml
rename to deployment/deprecated/securetty/securetty-baremetal-puppet.yaml
diff --git a/deployment/securetty/securetty-baremetal-ansible.yaml b/deployment/securetty/securetty-baremetal-ansible.yaml
new file mode 100644
index 0000000000..88d3295056
--- /dev/null
+++ b/deployment/securetty/securetty-baremetal-ansible.yaml
@@ -0,0 +1,50 @@
+heat_template_version: rocky
+
+description: >
+  Configure securetty values
+
+parameters:
+  ServiceData:
+    default: {}
+    description: Dictionary packing service data
+    type: json
+  ServiceNetMap:
+    default: {}
+    description: Mapping of service_name -> network name. Typically set
+                 via parameter_defaults in the resource registry.  This
+                 mapping overrides those in ServiceNetMapDefaults.
+    type: json
+  DefaultPasswords:
+    default: {}
+    type: json
+  RoleName:
+    default: ''
+    description: Role name on which the service is applied
+    type: string
+  RoleParameters:
+    default: {}
+    description: Parameters specific to the role
+    type: json
+  EndpointMap:
+    default: {}
+    description: Mapping of service endpoint -> protocol. Typically set
+                 via parameter_defaults in the resource registry.
+    type: json
+  TtyValues:
+    default: {}
+    description: Configures console values in securetty
+    type: json
+    constraints:
+      - length: { min: 1}
+
+outputs:
+  role_data:
+    description: Console data for the securetty
+    value:
+      service_name: securetty
+      host_prep_tasks:
+        - name: Run securetty role
+          include_role:
+            name: tripleo-securetty
+          vars:
+            tripleo_ttys: {get_param: TtyValues}
diff --git a/environments/securetty.yaml b/environments/securetty.yaml
index cef84e92d4..487869ebab 100644
--- a/environments/securetty.yaml
+++ b/environments/securetty.yaml
@@ -1,5 +1,5 @@
 resource_registry:
-  OS::TripleO::Services::Securetty: ../deployment/securetty/securetty-baremetal-puppet.yaml
+  OS::TripleO::Services::Securetty: ../deployment/securetty/securetty-baremetal-ansible.yaml
 
 parameter_defaults:
   TtyValues: