diff --git a/internal/kms/kmip.go b/internal/kms/kmip.go
index f4862691a..a842c0ac7 100644
--- a/internal/kms/kmip.go
+++ b/internal/kms/kmip.go
@@ -255,7 +255,7 @@ func (kms *kmipKMS) DecryptDEK(_, encryptedDEK string) (string, error) {
 		DecryptRequestPayload{
 			UniqueIdentifier: kms.uniqueIdentifier,
 			Data:             emd.DEK,
-			IVCounterNonce:   emd.DEK,
+			IVCounterNonce:   emd.Nonce,
 			CryptographicParameters: kmip.CryptographicParameters{
 				PaddingMethod:          kmip14.PaddingMethodPKCS5,
 				CryptographicAlgorithm: kmip14.CryptographicAlgorithmAES,