diff --git a/metal/roles/pxe_server/templates/kickstart.ks.j2 b/metal/roles/pxe_server/templates/kickstart.ks.j2
index 7495bf78..cd029c95 100644
--- a/metal/roles/pxe_server/templates/kickstart.ks.j2
+++ b/metal/roles/pxe_server/templates/kickstart.ks.j2
@@ -34,6 +34,8 @@ timezone {{ timezone }} --isUtc
 user --groups=wheel --name=admin
 # Add SSH key
 sshkey --username=root "{{ ssh_public_key }}"
+# Disable root password login
+rootpw --lock
 
 # Disable SELinux
 selinux --disabled