diff --git a/bin/tests/system/rndc/ns5/named.conf b/bin/tests/system/rndc/ns5/named.conf
index 5a8a472acb..35ce5cbbc5 100644
--- a/bin/tests/system/rndc/ns5/named.conf
+++ b/bin/tests/system/rndc/ns5/named.conf
@@ -24,8 +24,13 @@ options {
 	recursion no;
 };
 
+key rndc_key {
+        secret "1234abcd8765";
+        algorithm hmac-sha256;
+};
+
 controls {
-	inet 10.53.0.5 port 9953 allow { any; } read-only yes;
+	inet 10.53.0.5 port 9953 allow { any; } keys { rndc_key; } read-only yes;
 };
 
 zone "." {
diff --git a/bin/tests/system/rndc/tests.sh b/bin/tests/system/rndc/tests.sh
index 8337cf64e1..c001ec4dd6 100644
--- a/bin/tests/system/rndc/tests.sh
+++ b/bin/tests/system/rndc/tests.sh
@@ -435,9 +435,9 @@ status=`expr $status + $ret`
 
 echo "I:test read-only control channel access"
 ret=0
-$RNDC -s 10.53.0.5 -p 9953 status > /dev/null 2>&1 || ret=1
-$RNDC -s 10.53.0.5 -p 9953 nta -dump > /dev/null 2>&1 || ret=1
-$RNDC -s 10.53.0.5 -p 9953 reconfig > /dev/null 2>&1 && ret=1
+$RNDC -s 10.53.0.5 -p 9953 -c ../common/rndc.conf status > /dev/null 2>&1 || ret=1
+$RNDC -s 10.53.0.5 -p 9953 -c ../common/rndc.conf nta -dump > /dev/null 2>&1 || ret=1
+$RNDC -s 10.53.0.5 -p 9953 -c ../common/rndc.conf reconfig > /dev/null 2>&1 && ret=1
 if [ $ret != 0 ]; then echo "I:failed"; fi
 status=`expr $status + $ret`