diff --git a/etc/profiles.yml b/etc/profiles.yml
index ad66cac5ab..3ab980c705 100644
--- a/etc/profiles.yml
+++ b/etc/profiles.yml
@@ -23,7 +23,7 @@ default:
   sbd.watchdog_timeout: 15
 
 knet-default:
-  corosync.totem.crypto_hash: sha1
+  corosync.totem.crypto_hash: sha256
   corosync.totem.crypto_cipher: aes256
 
 microsoft-azure: