diff --git a/src/replica/replica_stub.cpp b/src/replica/replica_stub.cpp
index 80fc7f40e4..cdaedb5668 100644
--- a/src/replica/replica_stub.cpp
+++ b/src/replica/replica_stub.cpp
@@ -439,7 +439,7 @@ void replica_stub::initialize(const replication_options &opts, bool clear /* = f
                   kms_path);
     }
 
-    std::string server_key;
+    static std::string server_key;
     dsn::replication::kms_info kms_info;
     if (FLAGS_encrypt_data_at_rest && !utils::is_empty(FLAGS_hadoop_kms_url)) {
         _key_provider.reset(new dsn::security::kms_key_provider(