diff --git a/setup/so-setup b/setup/so-setup
index 6476e32d3..60d9505df 100755
--- a/setup/so-setup
+++ b/setup/so-setup
@@ -64,6 +64,10 @@ done
 
 # Let's see what OS we are dealing with here
 detect_os
+
+# Ubuntu/Debian whiptail pallete to make it look the same as CentOS and Rocky.
+set_palette >> $setup_log 2>&1
+
 if [[ $not_supported ]]; then
 	if (whiptail_unsupported_os_warning); then
 		true
@@ -255,9 +259,6 @@ local_sbin="$(pwd)/../salt/common/tools/sbin"
 manager_sbin="$(pwd)/../salt/manager/tools/sbin"
 export PATH=$PATH:$local_sbin:$manager_sbin
 
-# Ubuntu/Debian whiptail pallete to make it look the same as CentOS and Rocky.
-set_palette >> $setup_log 2>&1
-
 # Kernel messages can overwrite whiptail screen #812
 # https://github.com/Security-Onion-Solutions/securityonion/issues/812
 dmesg -D