diff --git a/src/boot.sh b/src/boot.sh
index b302e01..52e25a7 100644
--- a/src/boot.sh
+++ b/src/boot.sh
@@ -9,6 +9,9 @@ case "${BOOT_MODE,,}" in
   uefi)
     BOOT_OPTS="-bios /usr/share/OVMF/OVMF_CODE_4M.fd"
     ;;
+  secure)
+    BOOT_OPTS="-bios /usr/share/OVMF/OVMF_CODE_4M.secboot.fd"
+    ;;
   legacy)
     BOOT_OPTS=""
     ;;