diff --git a/.changelog/2656.txt b/.changelog/2656.txt
new file mode 100644
index 0000000000..07436087d3
--- /dev/null
+++ b/.changelog/2656.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+control-plane: increase timeout after login for ACL replication to 60 seconds
+```
\ No newline at end of file
diff --git a/control-plane/subcommand/common/common.go b/control-plane/subcommand/common/common.go
index 598ba66ea5..1636c0b10e 100644
--- a/control-plane/subcommand/common/common.go
+++ b/control-plane/subcommand/common/common.go
@@ -39,8 +39,8 @@ const (
 	// The number of times to attempt ACL Login.
 	numLoginRetries = 100
 
-	raftReplicationTimeout   = 2 * time.Second
-	tokenReadPollingInterval = 100 * time.Millisecond
+	raftReplicationTimeout   = 60 * time.Second
+	tokenReadPollingInterval = 500 * time.Millisecond
 )
 
 // Logger returns an hclog instance with log level set and JSON logging enabled/disabled, or an error if level is invalid.