diff --git a/nixos/boot/opencore.nix b/nixos/boot/opencore.nix
index c5f7b6a..c92b79d 100644
--- a/nixos/boot/opencore.nix
+++ b/nixos/boot/opencore.nix
@@ -36,6 +36,7 @@ let
 
           Misc.Security.SecureBootModel = "Disabled";
           Misc.Security.ScanPolicy = 0;
+          Misc.Security.Vault = "Optional";
           UEFI.Quirks.DisableSecurityPolicy = true;
           UEFI.Quirks.ReleaseUsbOwnership = true;