diff --git a/infrastructure/loadtesting/terraform/infra/main.tf b/infrastructure/loadtesting/terraform/infra/main.tf
index 9b4d2a3b3a..f39ef37fe4 100644
--- a/infrastructure/loadtesting/terraform/infra/main.tf
+++ b/infrastructure/loadtesting/terraform/infra/main.tf
@@ -138,6 +138,12 @@ module "loadtest" {
       local.extra_secrets
     )
     private_key_secret_name = "${local.customer}-fleet-server-private-key"
+    software_installers = {
+      # bucket_prefix shortened to allow for terraform.workspace values with longer names
+      bucket_prefix  = "${terraform.workspace}-sw-inst-"
+      create_kms_key = true
+      kms_alias      = "${terraform.workspace}-software-installers"
+    }
     volumes = [
       {
         name = "rds-tls-certs"
diff --git a/infrastructure/loadtesting/terraform/infra/template/cloudfront.tf.disabled b/infrastructure/loadtesting/terraform/infra/template/cloudfront.tf.disabled
index 8fd074aee1..33774f338d 100644
--- a/infrastructure/loadtesting/terraform/infra/template/cloudfront.tf.disabled
+++ b/infrastructure/loadtesting/terraform/infra/template/cloudfront.tf.disabled
@@ -1,10 +1,10 @@
 module "cloudfront-software-installers" {
-  source            = "github.com/fleetdm/fleet-terraform/addons/cloudfront-software-installers?ref=tf-mod-addon-cloudfront-software-installers-v1.0.1"
+  source            = "github.com/fleetdm/fleet-terraform/addons/cloudfront-software-installers?ref=tf-mod-addon-cloudfront-software-installers-v1.2.0"
   customer          = terraform.workspace
   s3_bucket         = module.loadtest.byo-db.byo-ecs.fleet_s3_software_installers_config.bucket_name
   s3_kms_key_id     = module.loadtest.byo-db.byo-ecs.fleet_s3_software_installers_config.kms_key_id
   public_key        = tls_private_key.cloudfront_key.public_key_pem
-  private_key       = tls_private_key.cloudfront_key.private_key_pem
+  private_key       = tls_private_key.cloudfront_key.private_key_pem_pkcs8
   enable_logging    = true
   logging_s3_bucket = module.logging_alb.log_s3_bucket_id
 }