diff --git a/inventory/host_vars/openqa-p09-worker01.iad2.fedoraproject.org b/inventory/host_vars/openqa-p09-worker01.iad2.fedoraproject.org
index c59cb5c8c5..aae22a1f88 100644
--- a/inventory/host_vars/openqa-p09-worker01.iad2.fedoraproject.org
+++ b/inventory/host_vars/openqa-p09-worker01.iad2.fedoraproject.org
@@ -41,6 +41,15 @@ network_connections:
     name: enp1s0f1np1
     state: down
     type: ethernet
+nbde: true
+nbde_client_bindings:
+  - device: /dev/md0
+    encryption_password: "{{ nbde_password }}"
+    password_temporary: no
+    threshold: 1
+    servers:
+      - http://tang01.iad2.fedoraproject.org
+      - http://tang02.iad2.fedoraproject.org
 nrpe_procs_crit: 300
 nrpe_procs_warn: 250
 # has an HW RNG, so let's have rngd
diff --git a/inventory/host_vars/openqa-p09-worker02.iad2.fedoraproject.org b/inventory/host_vars/openqa-p09-worker02.iad2.fedoraproject.org
index 8d87a75bf5..ad3250dd1f 100644
--- a/inventory/host_vars/openqa-p09-worker02.iad2.fedoraproject.org
+++ b/inventory/host_vars/openqa-p09-worker02.iad2.fedoraproject.org
@@ -46,6 +46,15 @@ network_connections:
     name: enP2p1s0f0np0
     state: down
     type: ethernet
+nbde: true
+nbde_client_bindings:
+  - device: /dev/md0
+    encryption_password: "{{ nbde_password }}"
+    password_temporary: no
+    threshold: 1
+    servers:
+      - http://tang01.iad2.fedoraproject.org
+      - http://tang02.iad2.fedoraproject.org
 nrpe_procs_crit: 300
 nrpe_procs_warn: 250
 # has an HW RNG, so let's have rngd