diff --git a/roles/rabbitmq_cluster/templates/rabbitmq.config b/roles/rabbitmq_cluster/templates/rabbitmq.config
index a12d27edd1..3fa421d26e 100644
--- a/roles/rabbitmq_cluster/templates/rabbitmq.config
+++ b/roles/rabbitmq_cluster/templates/rabbitmq.config
@@ -3,6 +3,7 @@
   [
    %% We do not want plain TCP, only TLS
    {tcp_listeners, []},
+   {ssl_cert_login_from, common_name},
    %% Here goes TLS
    {ssl_listeners, [5671]},
    {ssl_options, [{cacertfile,  "/etc/rabbitmq/ca.crt"},