diff --git a/templates/etc/rabbitmq/rabbitmq.conf.j2 b/templates/etc/rabbitmq/rabbitmq.conf.j2
index fbb2493..57b7f09 100644
--- a/templates/etc/rabbitmq/rabbitmq.conf.j2
+++ b/templates/etc/rabbitmq/rabbitmq.conf.j2
@@ -17,9 +17,11 @@ auth_backends.1.authn = ldap
 auth_backends.1.authz = internal
 auth_backends.2       = internal
 auth_mechanisms.1     = PLAIN
+auth_mechanisms.1     = AMQPLAIN
 auth_mechanisms.1     = EXTERNAL
+# No certs for internal
 auth_mechanisms.2     = PLAIN
-auth_mechanisms.2     = EXTERNAL
+auth_mechanisms.2     = AMQPLAIN
 
 ssl_cert_login_from   = common_name
 auth_ldap.dn_lookup_bind.user_dn  = {{ rabbitmq_ldap_bind_dn }}