diff --git a/modules/fmo-services/registration-agent-laptop/default.nix b/modules/fmo-services/registration-agent-laptop/default.nix
index f58e1cb..07eb2b6 100644
--- a/modules/fmo-services/registration-agent-laptop/default.nix
+++ b/modules/fmo-services/registration-agent-laptop/default.nix
@@ -83,6 +83,7 @@ in
               source = pkgs.writeTextDir ".env" ''
                 AUTOMATIC_PROVISIONING=false
                 TLS=true
+                ENCRYPTED_SECRETS=true
                 PROVISIONING_URL=
                 DEVICE_ALIAS=
                 DEVICE_IDENTITY_FILE=${cfg.certs_path}/identity.txt
diff --git a/modules/packages/registration-agent/registration-agent-laptop.nix b/modules/packages/registration-agent/registration-agent-laptop.nix
index 0b4f94a..2a5b811 100644
--- a/modules/packages/registration-agent/registration-agent-laptop.nix
+++ b/modules/packages/registration-agent/registration-agent-laptop.nix
@@ -6,12 +6,12 @@ pkgs.buildGoModule {
   name = "registration-agent-laptop";
   src = builtins.fetchGit {
     url = "git@github.com:tiiuae/registration-agent-laptop.git";
-    rev = "2f904867b98c65d38561e2447183109a7c68ba0d";
+    rev = "8df9034641431aaee66eceff0ebb5257e2e4244e";
     ref = "refs/heads/main";
   };
   tags = [ "prod" ];
   patches = [./remove-test.patch];
-  vendorHash = "sha256-18p7l1otlviZNlM0UlCgW/US5YckBYcY/OEJoJIsIM0=";
+  vendorHash = "sha256-aChlfSPo9E2ktzkeWZSWEsDh3lbcQvfuA7E2i8q36gU=";
   proxyVendor=true;
   postInstall = ''
     mv $out/bin/registration-agent-laptop $out/bin/registration-agent-laptop-orig