diff --git a/hypervisor/arch/x86/Kconfig b/hypervisor/arch/x86/Kconfig
index 11e485437..02e4624c2 100644
--- a/hypervisor/arch/x86/Kconfig
+++ b/hypervisor/arch/x86/Kconfig
@@ -354,7 +354,7 @@ config MCE_ON_PSC_WORKAROUND_DISABLED
 
 config ENFORCE_TURNOFF_AC
 	bool "Force to disable #AC for Split-locked Access"
-	default n
+	default y
 	help
 	  If CPU has #AC for split-locked access, HV enable it and VMs can't disable.
 	  Set this to enforce turn off that #AC, for community developer only.