diff --git a/templates/nova.conf.j2 b/templates/nova.conf.j2
index 0c5f081e..e3c5213c 100644
--- a/templates/nova.conf.j2
+++ b/templates/nova.conf.j2
@@ -59,11 +59,6 @@ libvirt_vif_type = ethernet
 vif_plugging_timeout = 10
 vif_plugging_is_fatal = False
 
-{% if nova_pci_passthrough_whitelist  %}
-# PCI Passthrough
-pci_passthrough_whitelist = "{{ nova_pci_passthrough_whitelist }}"
-{% endif %}
-
 # Hypervisor
 default_ephemeral_format = ext4
 
@@ -301,6 +296,12 @@ auth_url = {{ keystone_service_adminurl }}
 insecure = {{ keystone_service_adminuri_insecure | bool }}
 {% endif %}
 
+{% if nova_pci_passthrough_whitelist  %}
+# PCI Passthrough
+[pci]
+passthrough_whitelist = "{{ nova_pci_passthrough_whitelist }}"
+{% endif %}
+
 [wsgi]
 api_paste_config = /etc/nova/api-paste.ini
 {% if nova_external_ssl | bool %}