diff --git a/roles/pvc/tasks/ceph/main.yml b/roles/pvc/tasks/ceph/main.yml
index 5590966..4bc11f8 100644
--- a/roles/pvc/tasks/ceph/main.yml
+++ b/roles/pvc/tasks/ceph/main.yml
@@ -68,6 +68,12 @@
   become_user: ceph
   when: newhost is defined and newhost
 
+- name: create mgr auth keyring
+  command: ceph auth get-or-create mgr.{{ ansible_hostname }} mon 'allow profile mgr' osd 'allow *' mds 'allow *' --out-file /var/lib/ceph/mgr/ceph-{{ ansible_hostname }}/keyring
+  become_user: ceph
+  args:
+    creates: /var/lib/ceph/mgr/ceph-{{ ansible_hostname }}/keyring
+
 - name: touch monitor and manager done files
   file:
     dest: /var/lib/ceph/{{ item }}/ceph-{{ ansible_hostname }}/done
@@ -78,6 +84,12 @@
     - mgr
   when: newhost is defined and newhost
 
+- name: install OSD bootstrap keyring
+  file:
+    dest: /var/lib/ceph/bootstrap-osd/ceph.keyring
+    src: /etc/ceph/ceph.osd.bootstrap.keyring
+    state: link
+
 - name: start but disable daemons
   service:
     name: "{{ item }}"