diff --git a/rootdir/init.rc b/rootdir/init.rc
index e87d1e556..c220ee515 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -320,6 +320,9 @@ on post-fs-data
     mkdir /data/system/heapdump 0700 system system
     mkdir /data/user 0711 system system
 
+    # Set up the crypto policies on /data/user
+    exec -- /system/bin/vdc cryptfs setusercryptopolicies /data/user
+
     # Reload policy from /data/security if present.
     setprop selinux.reload_policy 1