diff --git a/config/Config-kernel.in b/config/Config-kernel.in
index b5eba78719d..3f013aa2b21 100644
--- a/config/Config-kernel.in
+++ b/config/Config-kernel.in
@@ -532,7 +532,7 @@ endif
 
 config KERNEL_KEYS
 	bool "Enable kernel access key retention support"
-	default n
+	default !SMALL_FLASH
 
 config KERNEL_PERSISTENT_KEYRINGS
 	bool "Enable kernel persistent keyrings"