diff --git a/ansible.cfg b/ansible.cfg
index b22ccdcd4e2cb2b54b303ed826d0a9cad354b507..5667bfad2adc13285ef7d4a706385421de44c471 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -1,7 +1,7 @@
 [defaults]
 # If set, configures the path to the Vault password file as an alternative to
 # specifying --vault-password-file on the command line.
-vault_identity_list = ../lza_ingest.pass, ../slub_osquery.pass
+vault_identity_list = ../lza_install_common.pass, ../slub_osquery.pass, ../lza_server_hardening.pass, ../lza_ingest.pass
 
 # Path to default inventory file
 # Administrators can override this by using the "-i <inventoryfile>" CLI
diff --git a/site.yml b/site.yml
index 5f4b73cdcdfb21e1a7317b1260598db9c64c7dcc..47e3859919ffd8c2e822203c8fbb007ddfedcd0a 100644
--- a/site.yml
+++ b/site.yml
@@ -47,6 +47,6 @@
   no_log: false
 
   roles:
-    # - { role: ansible_lza_install_common, become: true }
-    # - { role: ansible_lza_server_hardening, become: true }
+    - { role: ansible_lza_install_common, become: true }
+    - { role: ansible_lza_server_hardening, become: true }
     - {role: ansible_lza_ingest, become: true}