diff --git a/roles/base/tasks/crypto-policies.yml b/roles/base/tasks/crypto-policies.yml
index 7f2bb5f111..5425458fa7 100644
--- a/roles/base/tasks/crypto-policies.yml
+++ b/roles/base/tasks/crypto-policies.yml
@@ -16,6 +16,9 @@
   - crypto-policies
   - base/crypto-policies
 
+- debug:
+  msg: "admv is {{ ansible_distribution_major_version }} ccp is {{ currentcryptopolicy.stdout }} cpa is {{ cryptopolicyapplied.rc }} "
+
 - name: Set crypto-policy on fedora 33 and higher hosts to allow 2fa to work
   command: "update-crypto-policies --set LEGACY"
   when: "ansible_distribution_major_version|int >= 33 and (currentcryptopolicy.stdout.find('LEGACY') == -1 or cryptopolicyapplied.rc != 0)"