diff --git a/modules/linux/secureboot.nix b/modules/linux/secureboot.nix
index bcf9780..943799a 100644
--- a/modules/linux/secureboot.nix
+++ b/modules/linux/secureboot.nix
@@ -11,4 +11,7 @@
     enable = true;
     pkiBundle = "/var/lib/sbctl";
   };
+
+  # needed for tpm unlock
+  boot.initrd.systemd.enable = true;
 }