diff --git a/manifests/plugins/vault.pp b/manifests/plugins/vault.pp
index a26291fe..9debd9cf 100644
--- a/manifests/plugins/vault.pp
+++ b/manifests/plugins/vault.pp
@@ -26,7 +26,7 @@
 #
 # [*use_ssl*]
 #   (optional) Enable or disable SSL
-#   Defaults to false
+#   Defaults to $facts['os_service_default']
 #
 # [*ssl_ca_crt_file*]
 #   (optional) Set the ssl CA cert file
@@ -42,7 +42,7 @@ class barbican::plugins::vault (
   $approle_role_id   = $facts['os_service_default'],
   $approle_secret_id = $facts['os_service_default'],
   $kv_mountpoint     = $facts['os_service_default'],
-  $use_ssl           = false,
+  $use_ssl           = $facts['os_service_default'],
   $ssl_ca_crt_file   = $facts['os_service_default'],
   $global_default    = false,
 ) {
diff --git a/spec/classes/barbican_plugins_vault_spec.rb b/spec/classes/barbican_plugins_vault_spec.rb
index ca14b38b..f8cfa5de 100644
--- a/spec/classes/barbican_plugins_vault_spec.rb
+++ b/spec/classes/barbican_plugins_vault_spec.rb
@@ -91,7 +91,7 @@ describe 'barbican::plugins::vault' do
         is_expected.to contain_barbican_config('vault_plugin/kv_mountpoint') \
           .with_value('<SERVICE DEFAULT>')
         is_expected.to contain_barbican_config('vault_plugin/use_ssl') \
-          .with_value('false')
+          .with_value('<SERVICE DEFAULT>')
         is_expected.to contain_barbican_config('vault_plugin/ssl_ca_crt_file') \
           .with_value('<SERVICE DEFAULT>')
         is_expected.to contain_barbican_config(