diff --git a/lib/kadm5/create_s.c b/lib/kadm5/create_s.c
index 660ffd0fd..574d5b83c 100644
--- a/lib/kadm5/create_s.c
+++ b/lib/kadm5/create_s.c
@@ -94,7 +94,7 @@ kadm5_s_create_principal(void *server_handle,
     ent.keys.len = 2;
     ent.keys.val = calloc(ent.keys.len, sizeof(*ent.keys.val));
     ent.keys.val[0].key.keytype = KEYTYPE_DES;
-    ent.keys.val[1].key.keytype = KEYTYPE_DES;
+    ent.keys.val[1].key.keytype = KEYTYPE_DES3;
 
     ret = _kadm5_set_keys(context, &ent, password);