diff --git a/hosts/orion/os/boot.nix b/hosts/orion/os/boot.nix
index 61b5e422..95ea856e 100644
--- a/hosts/orion/os/boot.nix
+++ b/hosts/orion/os/boot.nix
@@ -50,6 +50,7 @@ in
         "rtsx_pci_sdmmc"
       ];
       systemd = {
+        tpm2.enable = true;
         enable = true;
         enableTpm2 = true;
       };