diff --git a/gatekeeper.cpp b/gatekeeper.cpp
index 268573d..4899661 100644
--- a/gatekeeper.cpp
+++ b/gatekeeper.cpp
@@ -139,6 +139,8 @@
         }
 
         timeout = ComputeRetryTimeout(&record);
+    } else {
+        response->request_reenroll = true;
     }
 
     if (DoVerify(password_handle, request.provided_password)) {