diff --git a/server/control.go b/server/control.go
index 9938c3bf..0227549b 100644
--- a/server/control.go
+++ b/server/control.go
@@ -186,7 +186,11 @@ func NewControl(
 	ctl.lastPing.Store(time.Now())
 
 	if ctlConnEncrypted {
-		cryptoRW, err := netpkg.NewCryptoReadWriter(ctl.conn, []byte(loginMsg.PrivilegeKey))
+		key := []byte(ctl.serverCfg.Auth.Token)
+		if ctl.serverCfg.Auth.Method == v1.AuthMethodJWT {
+			key = []byte(loginMsg.PrivilegeKey)
+		}
+		cryptoRW, err := netpkg.NewCryptoReadWriter(ctl.conn, key)
 		if err != nil {
 			return nil, err
 		}