diff --git a/lib/dns/dst_api.c b/lib/dns/dst_api.c
index 608cb00aea..3ee71447c9 100644
--- a/lib/dns/dst_api.c
+++ b/lib/dns/dst_api.c
@@ -1910,7 +1910,7 @@ dst__entropy_getdata(void *buf, unsigned int len, isc_boolean_t pseudo) {
 
 unsigned int
 dst__entropy_status(void) {
-#ifdef PKCS11CRYPTO
+#ifndef PKCS11CRYPTO
 #ifdef GSSAPI
 	unsigned int flags = dst_entropy_flags;
 	isc_result_t ret;