diff --git a/part2/stages/Functions/install-main b/part2/stages/Functions/install-main
index 4a9d5b2..2878215 100644
--- a/part2/stages/Functions/install-main
+++ b/part2/stages/Functions/install-main
@@ -452,10 +452,9 @@ seal_system() {
                 do_cmd chroot ${DOM0_MOUNT} \
                     sh -c '. /usr/lib/openxt/ml-functions ; write_config_pcrs' >&2
 
-                do_cmd /etc/init.d/trousers stop >&2
-                do_cmd chroot ${DOM0_MOUNT} \
-                    /usr/sbin/seal-system -f -r ${ROOT_DEV} >&2
-                do_cmd /etc/init.d/trousers start >&2
+                # touch marker and let delayed-seal initscript handle
+                # sealing during shutdown when VMs aren't running.
+                touch /tmp/upgrade-delayed-seal
 
                 do_umount_all ${DOM0_MOUNT}