diff --git a/srsenb/src/stack/rrc/rrc.cc b/srsenb/src/stack/rrc/rrc.cc
index 2808a4c8d..59f24d197 100644
--- a/srsenb/src/stack/rrc/rrc.cc
+++ b/srsenb/src/stack/rrc/rrc.cc
@@ -1905,6 +1905,10 @@ void rrc::ue::send_connection_reconf_new_bearer()
 
 void rrc::ue::send_security_mode_command()
 {
+  // Setup SRB1 security/integrity. Encryption is set on completion
+  parent->pdcp->config_security(rnti, RB_ID_SRB1, ue_security_cfg.get_as_sec_cfg());
+  parent->pdcp->enable_integrity(rnti, RB_ID_SRB1);
+
   dl_dcch_msg_s        dl_dcch_msg;
   security_mode_cmd_s* comm = &dl_dcch_msg.msg.set_c1().set_security_mode_cmd();
   comm->rrc_transaction_id  = (uint8_t)((transaction_id++) % 4);
@@ -1912,10 +1916,6 @@ void rrc::ue::send_security_mode_command()
   comm->crit_exts.set_c1().set_security_mode_cmd_r8().security_cfg_smc.security_algorithm_cfg =
       ue_security_cfg.get_security_algorithm_cfg();
 
-  // Setup SRB1 security/integrity. Encryption is set on completion
-  parent->pdcp->enable_integrity(rnti, RB_ID_SRB1);
-  parent->pdcp->config_security(rnti, RB_ID_SRB1, ue_security_cfg.get_as_sec_cfg());
-
   send_dl_dcch(&dl_dcch_msg);
 }