diff --git a/script/build_package.sh b/script/build_package.sh
index 214a875..c2a7058 100755
--- a/script/build_package.sh
+++ b/script/build_package.sh
@@ -483,7 +483,8 @@
 
 	# If it is a TBBR build, extract the MBED TLS library from archive
 	if [ "$(get_tf_opt TRUSTED_BOARD_BOOT)" = 1 ] ||
-	   [ "$(get_tf_opt MEASURED_BOOT)" = 1 ]; then
+	   [ "$(get_tf_opt MEASURED_BOOT)" = 1 ] ||
+	   [ "$(get_tf_opt DRTM_SUPPORT)" = 1 ]; then
 		mbedtls_dir="$workspace/mbedtls"
 		if [ ! -d "$mbedtls_dir" ]; then
 			mbedtls_ar="$workspace/mbedtls.tar.gz"
diff --git a/script/tf-coverity/tf-cov-make b/script/tf-coverity/tf-cov-make
index f0b8b03..4260a69 100755
--- a/script/tf-coverity/tf-cov-make
+++ b/script/tf-coverity/tf-cov-make
@@ -179,6 +179,9 @@
 # Measured Boot
 clean_build $fvp_common_flags ${ARM_TBB_OPTIONS} MBOOT_EL_HASH_ALG=sha256 MEASURED_BOOT=1 USE_ROMLIB=1
 
+# DRTM
+clean_build $fvp_common_flags ${ARM_TBB_OPTIONS} TPM_HASH_ALG=sha256 DRTM_SUPPORT=1 USE_ROMLIB=1
+
 # CoT descriptors in device tree
 clean_build $fvp_common_flags ${ARM_TBB_OPTIONS} COT_DESC_IN_DTB=1 USE_ROMLIB=1