diff --git a/kmip/services/server/engine.py b/kmip/services/server/engine.py
index 839b90e..71e4785 100644
--- a/kmip/services/server/engine.py
+++ b/kmip/services/server/engine.py
@@ -593,10 +593,14 @@ class KmipEngine(object):
         for attribute_name in attr_names:
             object_type = managed_object._object_type
 
+            # TODO (ph) Create the policy once and just pass these calls the
+            #           KMIP version for the current request.
             if not self._attribute_policy.is_attribute_supported(
                     attribute_name
             ):
                 continue
+            if self._attribute_policy.is_attribute_deprecated(attribute_name):
+                continue
 
             if self._attribute_policy.is_attribute_applicable_to_object_type(
                 attribute_name,
diff --git a/kmip/services/server/policy.py b/kmip/services/server/policy.py
index a266648..1fa021d 100644
--- a/kmip/services/server/policy.py
+++ b/kmip/services/server/policy.py
@@ -521,7 +521,8 @@ class AttributePolicy(object):
                     enums.ObjectType.SECRET_DATA,
                     enums.ObjectType.OPAQUE_DATA
                 ),
-                contents.ProtocolVersion(1, 0)
+                contents.ProtocolVersion(1, 0),
+                contents.ProtocolVersion(2, 0)
             ),
             'Cryptographic Usage Mask': AttributeRuleSet(
                 True,