diff --git a/templates/sshd_config.conf.j2 b/templates/sshd_config.conf.j2
index 10f1fab7d9e6878065908eea93e2fce99979d4e1..679df198dc3a999d555c8c3641113920d27931c4 100644
--- a/templates/sshd_config.conf.j2
+++ b/templates/sshd_config.conf.j2
@@ -6,7 +6,7 @@ Port {{ item }}
 ListenAddress {{ item }}
 {% endfor %}
 
-PermitRootLogin {{ 'yes' if sshd_permit_root_login else 'no' }}
+PermitRootLogin {{ 'prohibit-password' if sshd_permit_root_login else 'no' }}
 
 PubkeyAuthentication {{ 'yes' if sshd_allow_pubkeys else 'no' }}
 PasswordAuthentication {{ 'yes' if sshd_allow_passwords else 'no' }}