diff --git a/roles/ceph-mon/tasks/ceph_keys.yml b/roles/ceph-mon/tasks/ceph_keys.yml
index 544478cfa..f255ef5de 100644
--- a/roles/ceph-mon/tasks/ceph_keys.yml
+++ b/roles/ceph-mon/tasks/ceph_keys.yml
@@ -33,6 +33,7 @@
     group: root
   with_items:
     - "{{ ceph_keys.stdout_lines }}"
+  when: cephx
 
 - name: copy keys to the ansible server
   fetch: