diff --git a/libwvdrmengine/cdm/core/test/cdm_engine_test.cpp b/libwvdrmengine/cdm/core/test/cdm_engine_test.cpp
index 071a9fc7..3240813c 100644
--- a/libwvdrmengine/cdm/core/test/cdm_engine_test.cpp
+++ b/libwvdrmengine/cdm/core/test/cdm_engine_test.cpp
@@ -183,6 +183,10 @@ class WvCdmEnginePreProvTest : public testing::Test {
     CdmCertificateType cert_type = kCertificateWidevine;
     std::string cert_authority;
     std::string cert, wrapped_key;
+    // Keep a crypto session alive so that OEMCrypto won't terminate while we
+    // try to provision. This is needed for testing nonce floods.
+    CryptoSession keep_alive(cdm_engine_.GetMetrics()->GetCryptoMetrics());
+
     ASSERT_EQ(NO_ERROR, cdm_engine_.SetProvisioningServiceCertificate(
         g_provisioning_service_certificate));
     CdmResponseType result = NO_ERROR;