diff --git a/manifests/site.pp b/manifests/site.pp
index 40b7d69..9fab4c9 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -58,7 +58,7 @@ node default {
   include ruby
 
   # fail if FDE is not enabled
-  if $::root_encrypted == false {
+  if $::root_encrypted == 'no' {
     fail('Please enable full disk encryption and try again')
   }