diff --git a/recipes-core/pam/libpam/pam.d/common-password b/recipes-core/pam/libpam/pam.d/common-password
index ac3f368..f0f0518 100644
--- a/recipes-core/pam/libpam/pam.d/common-password
+++ b/recipes-core/pam/libpam/pam.d/common-password
@@ -18,7 +18,7 @@
 # here are the per-package modules (the "Primary" block)
 password	[success=ok default=die]	pam_ipmicheck.so spec_grp_name=ipmi
 password	[success=ok default=die]	pam_cracklib.so debug enforce_for_root reject_username minlen=8 difok=0 use_authtok
-#password	[success=ok ignore=ignore default=die]	pam_pwhistory.so debug enforce_for_root remember=0 use_authtok
+password	[success=ok ignore=ignore default=die]	pam_pwhistory.so debug enforce_for_root remember=0 use_authtok
 password	[success=ok default=die]	pam_unix.so sha512 use_authtok
 password	[success=1 default=die] 	pam_ipmisave.so spec_grp_name=ipmi spec_pass_file=/etc/ipmi_pass key_file=/etc/key_file
 # here's the fallback if no module succeeds