diff --git a/tools/packaging/kernel/configs/fragments/common/virtio-extras.conf b/tools/packaging/kernel/configs/fragments/common/virtio-extras.conf
new file mode 100644
index 0000000000..dc7ab3f6a5
--- /dev/null
+++ b/tools/packaging/kernel/configs/fragments/common/virtio-extras.conf
@@ -0,0 +1,4 @@
+# !confidential
+# This is used by the s390 arch at least. Leave it on globally.
+CONFIG_HW_RANDOM=y
+CONFIG_HW_RANDOM_VIRTIO=y
diff --git a/tools/packaging/kernel/configs/fragments/common/virtio.conf b/tools/packaging/kernel/configs/fragments/common/virtio.conf
index a96c2cebcf..8211b62d29 100644
--- a/tools/packaging/kernel/configs/fragments/common/virtio.conf
+++ b/tools/packaging/kernel/configs/fragments/common/virtio.conf
@@ -10,10 +10,6 @@ CONFIG_VIRTIO_PCI=y
 # Without this nested-VM Kata does not work (we have not worked out exactly why)
 CONFIG_VIRTIO_PCI_LEGACY=y
 
-# This is used by the s390 arch at least. Leave it on globally.
-CONFIG_HW_RANDOM=y
-CONFIG_HW_RANDOM_VIRTIO=y
-
 # FIXME - are we moving away from/choosing between SCSI and BLK support?
 # https://github.com/kata-containers/packaging/issues/483
 CONFIG_SCSI=y