diff --git a/live-build/misc/ansible-roles/appliance-build.virtualization-common/tasks/main.yml b/live-build/misc/ansible-roles/appliance-build.virtualization-common/tasks/main.yml
index 3e7eadd1..a1c1f5bd 100644
--- a/live-build/misc/ansible-roles/appliance-build.virtualization-common/tasks/main.yml
+++ b/live-build/misc/ansible-roles/appliance-build.virtualization-common/tasks/main.yml
@@ -81,6 +81,7 @@
     - delphix-fluentd.service
     - delphix-masking.service
     - ntpsec.service
+    - ntpsec-rotate-stats.timer
     - snmpd.service
 
 #
diff --git a/upgrade/upgrade-scripts/common.sh b/upgrade/upgrade-scripts/common.sh
index 3d1c1880..4e48b4fa 100644
--- a/upgrade/upgrade-scripts/common.sh
+++ b/upgrade/upgrade-scripts/common.sh
@@ -492,6 +492,7 @@ function fix_and_migrate_services() {
 		nfs-mountd.service
 		nginx.service
 		ntpsec.service
+		ntpsec-rotate-stats.timer
 		postgresql.service
 		rpc-statd.service
 		rpcbind.service
diff --git a/upgrade/upgrade-scripts/execute b/upgrade/upgrade-scripts/execute
index f1408e8e..b702f66d 100755
--- a/upgrade/upgrade-scripts/execute
+++ b/upgrade/upgrade-scripts/execute
@@ -387,7 +387,7 @@ if [[ -f "/etc/ntp/ntp.conf" ]]; then
 	cp /etc/ntp/ntp.conf /etc/ntpsec/ntp.conf ||
 		die "failed to copy /etc/ntp/ntp.conf to /etc/ntpsec/ntp.conf"
 	if [[ "$(systemctl is-enabled ntp.service)" == enabled ]]; then
-		systemctl enable ntpsec.service
+		systemctl enable ntpsec.service ntpsec-rotate-stats.timer
 	fi
 fi