diff --git a/internal/daemon/worker/auth_rotation.go b/internal/daemon/worker/auth_rotation.go
index 6ee978893..aab225aa7 100644
--- a/internal/daemon/worker/auth_rotation.go
+++ b/internal/daemon/worker/auth_rotation.go
@@ -139,7 +139,7 @@ func rotateWorkerAuth(ctx context.Context, w *Worker, currentNodeCreds *types.No
 		ctx,
 		w.WorkerAuthStorage,
 		randReaderOpt,
-		nodeenrollment.WithWrapper(w.conf.WorkerAuthKms),
+		nodeenrollment.WithWrapper(w.conf.WorkerAuthStorageKms),
 		nodeenrollment.WithSkipStorage(true),
 	)
 	if err != nil {
@@ -189,7 +189,7 @@ func rotateWorkerAuth(ctx context.Context, w *Worker, currentNodeCreds *types.No
 		ctx,
 		w.WorkerAuthStorage,
 		fetchResp,
-		nodeenrollment.WithWrapper(w.conf.WorkerAuthKms),
+		nodeenrollment.WithWrapper(w.conf.WorkerAuthStorageKms),
 	)
 	if err != nil {
 		return berrors.Wrap(ctx, err, op)