diff --git a/kdc/default_config.c b/kdc/default_config.c
index 8371074ae..53e024a1d 100644
--- a/kdc/default_config.c
+++ b/kdc/default_config.c
@@ -54,6 +54,7 @@ krb5_kdc_get_config(krb5_context context, krb5_kdc_configuration **config)
     c->as_use_strongest_session_key = TRUE;
     c->preauth_use_strongest_session_key = TRUE;
     c->tgs_use_strongest_session_key = TRUE;
+    c->use_strongest_server_key = TRUE;
     c->check_ticket_addresses = TRUE;
     c->allow_null_ticket_addresses = TRUE;
     c->allow_anonymous = FALSE;