diff --git a/qemu-check.exp b/qemu-check.exp
index 8596251..88e7d5d 100644
--- a/qemu-check.exp
+++ b/qemu-check.exp
@@ -39,7 +39,7 @@
 # Save guest console output to a file
 log_file -a -noappend "serial0.log"
 info "Starting QEMU..."
-spawn ../qemu/arm-softmmu/qemu-system-arm -nographic -monitor none -machine virt -cpu cortex-a15 -m 1057 -serial stdio -serial file:serial1.log -bios $bios
+spawn ../qemu/arm-softmmu/qemu-system-arm -nographic -monitor none -machine virt -machine secure=on virt -cpu cortex-a15 -m 1057 -serial stdio -serial file:serial1.log -bios $bios
 expect {
 	"Kernel panic" {
 		info "!!! Kernel panic\n"
diff --git a/qemu.mk b/qemu.mk
index 5bdc0c2..f20194d 100644
--- a/qemu.mk
+++ b/qemu.mk
@@ -214,7 +214,7 @@
 	$(QEMU_PATH)/arm-softmmu/qemu-system-arm \
 		-nographic \
 		-serial tcp:localhost:54320 -serial tcp:localhost:54321 \
-		-s -S -machine virt -cpu cortex-a15 \
+		-s -S -machine virt -machine secure=on -cpu cortex-a15 \
 		-m 1057 \
 		-bios $(ROOT)/out/bios-qemu/bios.bin $(QEMU_EXTRA_ARGS)