diff --git a/nova/conf/key_manager.py b/nova/conf/key_manager.py
index d86182de7240..1aceed060eb1 100644
--- a/nova/conf/key_manager.py
+++ b/nova/conf/key_manager.py
@@ -27,6 +27,7 @@ key_manager_opts = [
     cfg.StrOpt(
         'fixed_key',
         deprecated_group='keymgr',
+        secret=True,
         help="""
 Fixed key returned by key manager, specified in hex.