diff --git a/inventory/host_vars/openqa-a64-worker01.iad2.fedoraproject.org b/inventory/host_vars/openqa-a64-worker01.iad2.fedoraproject.org
new file mode 100644
index 0000000000..caa0cbd34e
--- /dev/null
+++ b/inventory/host_vars/openqa-a64-worker01.iad2.fedoraproject.org
@@ -0,0 +1,39 @@
+---
+freezes: false
+# eth0 is disabled/nothing
+# eth1 is active network
+# eth2 is disabled/nothing
+ansible_ifcfg_infra_net_devices: ['eth1']
+gw: 10.3.174.254
+dns: 10.3.163.33
+eth1_ip: 10.3.174.61
+eth1_nm: 255.255.255.0
+datacenter: iad2
+fas_client_groups: sysadmin-qa,sysadmin-main,sysadmin-noc,fi-apprentice,sysadmin-veteran
+nrpe_procs_warn: 250
+nrpe_procs_crit: 300
+
+sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
+
+# openQA tap worker hosts (like this one) do stuff with ifcfg that base
+# doesn't understand. terrible, terrible stuff. seriously - it doesn't
+# handle the openvswitch config well. so let's tell it to just configure
+# the regular interfaces (which on this system is eth0-eth2) for us,
+# disabling all but the one we want to use (eth0), and leave everything
+# else alone. We use a variable definition here so the firewall config
+# (in the openqa_tap_workers group_vars) can reuse it.
+openqa_tap_iface: eth1
+ansible_ifcfg_whitelist: ['eth0', '{{ openqa_tap_iface }}', 'eth2']
+ansible_ifcfg_disabled: ['eth0', 'eth2']
+
+# this is a powerful machine, can handle more openQA workers
+openqa_workers: 8
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043', '20053', '20063', '20073', '20083']
+
+# has an HW RNG, so let's have rngd
+openqa_rngd: True
diff --git a/inventory/inventory b/inventory/inventory
index c559a3c1ff..4a2fc5f877 100644
--- a/inventory/inventory
+++ b/inventory/inventory
@@ -552,6 +552,7 @@ aarch64-c29n1-oqa.arm.fedoraproject.org
 aarch64-c30n1-oqa.arm.fedoraproject.org
 openqa-aarch64-01.qa.fedoraproject.org
 openqa-aarch64-03.qa.fedoraproject.org
+openqa-a64-worker01.iad2.fedoraproject.org
 
 # the workers that can run networked jobs. each server should have *one* of these per arch
 [openqa_tap_workers]
@@ -559,6 +560,7 @@ qa01.qa.fedoraproject.org
 qa02.qa.fedoraproject.org
 openqa-ppc64le-02.qa.fedoraproject.org
 openqa-aarch64-01.qa.fedoraproject.org
+openqa-a64-worker01.iad2.fedoraproject.org
 
 # the workers that need rw access to the factory share to run createhdds. again,
 # only one per arch per instance should be present. usually x86_64 images are created
@@ -568,6 +570,7 @@ openqa-ppc64le-02.qa.fedoraproject.org
 openqa-aarch64-01.qa.fedoraproject.org
 qa01.qa.fedoraproject.org
 qa02.qa.fedoraproject.org
+openqa-a64-worker01.iad2.fedoraproject.org
 
 [packages]
 packages03.phx2.fedoraproject.org
@@ -1362,6 +1365,7 @@ odcs-backend01.iad2.fedoraproject.org
 oci-registry01.iad2.fedoraproject.org
 oci-candidate-registry01.iad2.fedoraproject.org
 openqa01.iad2.fedoraproject.org
+openqa-a64-worker01.iad2.fedoraproject.org
 openqa-stg01.iad2.fedoraproject.org
 openqa-x86-worker01.iad2.fedoraproject.org
 osbs-control01.iad2.fedoraproject.org