diff --git a/metropolis/test/launch/BUILD.bazel b/metropolis/test/launch/BUILD.bazel
index f782fe6..3f9d8fd 100644
--- a/metropolis/test/launch/BUILD.bazel
+++ b/metropolis/test/launch/BUILD.bazel
@@ -2,7 +2,10 @@
 
 go_library(
     name = "go_default_library",
-    srcs = ["launch.go"],
+    srcs = [
+        "insecure_key.go",
+        "launch.go",
+    ],
     importpath = "source.monogon.dev/metropolis/test/launch",
     visibility = ["//metropolis:__subpackages__"],
     deps = [
diff --git a/metropolis/test/launch/cli/launch/main.go b/metropolis/test/launch/cli/launch/main.go
index cb85c88..e736d76 100644
--- a/metropolis/test/launch/cli/launch/main.go
+++ b/metropolis/test/launch/cli/launch/main.go
@@ -40,7 +40,7 @@
 		SerialPort: os.Stdout,
 		NodeParameters: &apb.NodeParameters{
 			Cluster: &apb.NodeParameters_ClusterBootstrap_{
-				ClusterBootstrap: &apb.NodeParameters_ClusterBootstrap{},
+				ClusterBootstrap: launch.InsecureClusterBootstrap,
 			},
 		},
 	}); err != nil {
diff --git a/metropolis/test/launch/insecure_key.go b/metropolis/test/launch/insecure_key.go
new file mode 100644
index 0000000..b67986f
--- /dev/null
+++ b/metropolis/test/launch/insecure_key.go
@@ -0,0 +1,41 @@
+// Copyright 2020 The Monogon Project Authors.
+//
+// SPDX-License-Identifier: Apache-2.0
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package launch
+
+import (
+	"crypto/ed25519"
+
+	apb "source.monogon.dev/metropolis/proto/api"
+)
+
+var (
+	// InsecurePrivateKey is a ED25519 key that can be used during development as
+	// a fixed Owner Key when bootstrapping new clusters.
+	InsecurePrivateKey = ed25519.NewKeyFromSeed([]byte(
+		"\xb5\xcf\x35\x0f\xbf\xfb\xea\xfa\xa0\xf0\x29\x9d\xfa\xf7\xca\x6f"+
+			"\xa2\xc2\xc7\x87\xd7\x03\x3e\xb2\x11\x4f\x36\xe0\x22\x73\x4f\x87"))
+	// InsecurePublicKey is the ED25519 public key corresponding to
+	// InsecurePrivateKey.
+	InsecurePublicKey = InsecurePrivateKey.Public().(ed25519.PublicKey)
+	// InsecureClusterBootstrap is a ClusterBootstrap message to be used within
+	// NodeParameters when bootstrapping a development cluster that should be owned
+	// by the InsecurePrivateKey.
+	InsecureClusterBootstrap = &apb.NodeParameters_ClusterBootstrap{
+		OwnerPublicKey: InsecurePublicKey,
+	}
+)
+