diff --git a/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg
new file mode 100644
index 00000000..3de03bf5
--- /dev/null
+++ b/meta-arm/recipes-kernel/linux/linux-yocto/tee.cfg
@@ -0,0 +1,10 @@
+CONFIG_HW_RANDOM_OPTEE=y
+CONFIG_TEE=y
+
+#
+# TEE drivers
+#
+CONFIG_OPTEE=y
+CONFIG_OPTEE_SHM_NUM_PRIV_PAGES=1
+# end of TEE drivers
+
diff --git a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
index b9995e04..3c3d36a9 100644
--- a/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
+++ b/meta-arm/recipes-kernel/linux/linux-yocto_5.10.bbappend
@@ -14,4 +14,7 @@ SRC_URI_append_qemuarm64-sbsa = " \
     "
 
 FILESEXTRAPATHS_prepend_qemuarm64-secureboot = "${ARMFILESPATHS}"
-SRC_URI_append_qemuarm64-secureboot = " file://zone_dma_revert.patch"
+SRC_URI_append_qemuarm64-secureboot = " \
+    file://zone_dma_revert.patch \
+    file://tee.cfg \
+    "