diff --git a/debian12/http/preseed.cfg b/debian12/http/preseed.cfg
index dee83ce..0d6147d 100644
--- a/debian12/http/preseed.cfg
+++ b/debian12/http/preseed.cfg
@@ -62,4 +62,5 @@ d-i finish-install/reboot_in_progress note
 d-i cdrom-detect/eject boolean true
 
 # remove installation-report
-d-i preseed/late_command string in-target apt-get -y purge installation-report
+d-i preseed/late_command string in-target apt-get -y purge installation-report; \
+  sed -i 's/#\?\(PermitRootLogin\s*\).*$/\1 yes/' /etc/ssh/sshd_config