It was indeed not on by default

I appreciate the tip! I'm going to have to put that in an Ansible playbook