diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index 0d1256095..2810b45c5 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -587,12 +587,12 @@ pk_mk_pa_reply_enckey(krb5_context context,
     memset(&ed, 0, sizeof(ed));
 
     /* default to DES3 if client doesn't tell us */
-    enveloped_enctype = ETYPE_DES3_CBC_NONE;
+    enveloped_enctype = ETYPE_DES3_CBC_NONE_CMS;
 
     for (i = 0; i < req->req_body.etype.len; i++) {
 	switch(req->req_body.etype.val[i]) {
 	case 15: /* des-ede3-cbc-Env-OID */
-	    enveloped_enctype = ETYPE_DES3_CBC_NONE;	    
+	    enveloped_enctype = ETYPE_DES3_CBC_NONE_CMS;
 	    break;
 	default:
 	    break;