diff --git a/tools/packaging/kernel/configs/fragments/s390/secure-execution.conf b/tools/packaging/kernel/configs/fragments/s390/secure-execution.conf
new file mode 100644
index 0000000000..d2f3630b85
--- /dev/null
+++ b/tools/packaging/kernel/configs/fragments/s390/secure-execution.conf
@@ -0,0 +1,3 @@
+# IBM Secure Execution (Protected Virtualization in kernel)
+
+CONFIG_PROTECTED_VIRTUALIZATION_GUEST=y