diff --git a/base/common_hardware.nix b/base/common_hardware.nix
index 87d6279..6f3c94d 100644
--- a/base/common_hardware.nix
+++ b/base/common_hardware.nix
@@ -22,6 +22,7 @@ in {
     lanzaboote = lib.mkIf config.conf.secureBoot {
       enable = true;
       pkiBundle = "/var/lib/sbctl";
+      settings.reboot-for-bitlocker = true;
     };
 
     loader = {