diff --git a/gdm-autologin.pamd b/gdm-autologin.pamd
index 74f0f83..d9ca813 100644
--- a/gdm-autologin.pamd
+++ b/gdm-autologin.pamd
@@ -7,4 +7,5 @@ auth     optional       pam_gnome_keyring.so
 account  include        common-account
 password include        common-password
 session  required       pam_loginuid.so
+session  optional       pam_keyinit.so force revoke
 session  include        common-session
diff --git a/gdm-launch-environment.pamd b/gdm-launch-environment.pamd
index e72f6a1..b9470e3 100644
--- a/gdm-launch-environment.pamd
+++ b/gdm-launch-environment.pamd
@@ -3,4 +3,5 @@
 auth     required       pam_permit.so
 account  required       pam_permit.so
 password include        common-password
+session  optional       pam_keyinit.so force revoke
 session  include        common-session
diff --git a/gdm.changes b/gdm.changes
index 8844937..53168ce 100644
--- a/gdm.changes
+++ b/gdm.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Jul 26 11:52:06 UTC 2018 - dimstar@opensuse.org
+
+- Enable pam_keyinit module (boo#1081947).
+
 -------------------------------------------------------------------
 Sun May 20 02:19:32 UTC 2018 - luc14n0@linuxmail.org
 
diff --git a/gdm.pamd b/gdm.pamd
index 1569003..1d1de06 100644
--- a/gdm.pamd
+++ b/gdm.pamd
@@ -5,4 +5,5 @@ auth     include        common-auth
 account  include        common-account
 password include        common-password
 session  required       pam_loginuid.so
+session  optional       pam_keyinit.so force revoke
 session  include        common-session