diff --git a/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg
new file mode 100644
index 00000000..3de03bf5
--- /dev/null
+++ b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg
@@ -0,0 +1,10 @@
+CONFIG_HW_RANDOM_OPTEE=y
+CONFIG_TEE=y
+
+#
+# TEE drivers
+#
+CONFIG_OPTEE=y
+CONFIG_OPTEE_SHM_NUM_PRIV_PAGES=1
+# end of TEE drivers
+
diff --git a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
index 9a9a00f5..0fd155f5 100644
--- a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
+++ b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
@@ -15,3 +15,7 @@ SRC_URI_append_qemuarm64-sbsa = " \
 
 LINUX_VERSION_qemuarm64-secureboot = "5.10.21"
 SRCREV_machine_qemuarm64-secureboot = "012f78dadb7186c479343b77e97df2925caf681e"
+FILESEXTRAPATHS_prepend_qemuarm64-secureboot = "${ARMFILESPATHS}"
+SRC_URI_append_qemuarm64-secureboot = " \
+    file://tee.cfg \
+    "