diff --git a/cfengine.spec b/cfengine.spec
index b5648bb..4b4d22d 100644
--- a/cfengine.spec
+++ b/cfengine.spec
@@ -228,6 +228,11 @@ rm -rf %{buildroot}/%{_datadir}/%{name}/README
 %install_info --name=%{name} --info-dir=%{_infodir} %{_infodir}/cf3-reference.info.gz
 %endif
 /sbin/ldconfig
+# generate key on initial install
+if [ $1 -lt 2 ]
+then
+  cf-key
+end
 
 %preun
 %service_del_preun cf-execd.service cf-monitord.service