diff --git a/kubernetes/infrastructure/openbao/rotation/mosquitto-open3e-int.yaml b/kubernetes/infrastructure/openbao/rotation/mosquitto-open3e-int.yaml
index c9a25dda..84af284f 100644
--- a/kubernetes/infrastructure/openbao/rotation/mosquitto-open3e-int.yaml
+++ b/kubernetes/infrastructure/openbao/rotation/mosquitto-open3e-int.yaml
@@ -27,6 +27,10 @@ metadata:
 spec:
   # Quarterly, own month offset (paperless: 1,4,7,10; health: 2,5,8,11).
   schedule: "0 4 1 3,6,9,12 *"
+  # Suspended (REN-802): the ESP32 only gets its password by hand, so a
+  # rotation would take the gateway offline. MQTT credentials move to the
+  # git-defined account register; this rotator is removed in that cleanup.
+  suspend: true
   timeZone: Europe/Berlin
   concurrencyPolicy: Forbid
   successfulJobsHistoryLimit: 2