diff --git a/config/Config-kernel.in b/config/Config-kernel.in
index a249e9726a..83c4c70b51 100644
--- a/config/Config-kernel.in
+++ b/config/Config-kernel.in
@@ -346,7 +346,7 @@ endif
 
 config KERNEL_KEYS
 	bool "Enable kernel access key retention support"
-	default n
+	default !SMALL_FLASH
 
 config KERNEL_PERSISTENT_KEYRINGS
 	bool "Enable kernel persistent keyrings"