diff --git a/ci/qcom-distro.yml b/ci/qcom-distro.yml
index 8f3204bfd..fd3c8cd1f 100644
--- a/ci/qcom-distro.yml
+++ b/ci/qcom-distro.yml
@@ -37,6 +37,13 @@ repos:
     branch: master
     url: https://github.com/uptane/meta-updater
 
+  meta-security:
+    url: https://git.yoctoproject.org/meta-security
+    branch: master
+    layers:
+      .:
+      meta-tpm:
+
 local_conf_header:
   virtualization:
     SKIP_META_VIRT_SANITY_CHECK = "1"
diff --git a/conf/machine/iq-8275-evk.conf b/conf/machine/iq-8275-evk.conf
index e57039943..f4c0b8d3c 100644
--- a/conf/machine/iq-8275-evk.conf
+++ b/conf/machine/iq-8275-evk.conf
@@ -4,7 +4,7 @@
 
 require conf/machine/include/qcom-qcs8300.inc
 
-MACHINE_FEATURES += "efi pci"
+MACHINE_FEATURES += "efi pci tpm2"
 
 KERNEL_DEVICETREE ?= " \
                       qcom/monaco-evk.dtb \
diff --git a/conf/machine/iq-9075-evk.conf b/conf/machine/iq-9075-evk.conf
index e027ae754..af47fc0f4 100644
--- a/conf/machine/iq-9075-evk.conf
+++ b/conf/machine/iq-9075-evk.conf
@@ -4,7 +4,7 @@
 
 require conf/machine/include/qcom-qcs9100.inc
 
-MACHINE_FEATURES += "efi pci"
+MACHINE_FEATURES += "efi pci tpm2"
 
 KERNEL_DEVICETREE ?= " \
                       qcom/lemans-evk.dtb \