diff --git a/recipes/server.rb b/recipes/server.rb
index e39dba9..55b2d21 100644
--- a/recipes/server.rb
+++ b/recipes/server.rb
@@ -171,12 +171,12 @@ else
   end
 end
 
-template '/etc/ipa/admin.password' do
-  source	'admin.password.erb'
-  user		'root'
+file '/etc/ipa/admin.password' do
+  content	"#{passwords['ipa_user_pwd']}"
+  owner		'root'
   group		'root'
   mode		'0600'
-  variables	:password => passwords['ipa_user_pwd']
+  sensitive	true
 end
 
 ##### services
diff --git a/templates/default/admin.password.erb b/templates/default/admin.password.erb
deleted file mode 100644
index 6518912..0000000
--- a/templates/default/admin.password.erb
+++ /dev/null
@@ -1 +0,0 @@
-<%= password -%>