diff --git a/base/ca/src/main/java/com/netscape/cms/profile/def/ServerKeygenUserKeyDefault.java b/base/ca/src/main/java/com/netscape/cms/profile/def/ServerKeygenUserKeyDefault.java
index fc289de5571..851be6220f8 100644
--- a/base/ca/src/main/java/com/netscape/cms/profile/def/ServerKeygenUserKeyDefault.java
+++ b/base/ca/src/main/java/com/netscape/cms/profile/def/ServerKeygenUserKeyDefault.java
@@ -325,8 +325,7 @@ public void populate(Request request, X509CertInfo info)
                 EncryptionAlgorithm encryptAlgorithm =
                         EncryptionAlgorithm.AES_128_CBC_PAD;
 
-                ConfigStore caCfg = engine.getConfigStore();
-
+                CAEngineConfig caCfg = engine.getConfig();
                 boolean useOAEP = caCfg.getBoolean("keyWrap.useOAEP",false);
 
                 KeyWrapAlgorithm wrapAlgorithm = KeyWrapAlgorithm.RSA;