diff --git a/firewall-s3/vm/fortigate.yaml b/firewall-s3/vm/fortigate.yaml
index 51cd118..8964c92 100644
--- a/firewall-s3/vm/fortigate.yaml
+++ b/firewall-s3/vm/fortigate.yaml
@@ -35,7 +35,8 @@ spec:
             enabled: true
         firmware:
           bootloader:
-            efi: {}
+            efi:
+              secureBoot: true
         devices:
           rng: {}
           networkInterfaceMultiqueue: true