diff --git a/roles/head-prep/tasks/main.yml b/roles/head-prep/tasks/main.yml
index f495b22..c17ecbe 100644
--- a/roles/head-prep/tasks/main.yml
+++ b/roles/head-prep/tasks/main.yml
@@ -64,3 +64,20 @@
     dest={{ ansible_user_dir }}/.ansible.cfg
     owner={{ ansible_user_id }} mode=0644
 
+- name: Copy node key (MaaS)
+  copy:
+    src={{ maas_node_key }}
+    dest={{ ansible_user_dir }}/node_key
+    owner={{ ansible_user }}
+    mode=0600
+    remote_src=True
+  when: on_maas
+
+- name: Copy node key (without MaaS)
+  copy:
+    src={{ ansible_user_dir }}/.ssh/id_rsa
+    dest={{ ansible_user_dir }}/node_key
+    owner={{ ansible_user }}
+    mode=0600
+    remote_src=True
+  when: not on_maas