diff --git a/src/security/vboot/Kconfig b/src/security/vboot/Kconfig
index ef7c24d879..d8f6779cb0 100644
--- a/src/security/vboot/Kconfig
+++ b/src/security/vboot/Kconfig
@@ -463,6 +463,10 @@ config GBB_FLAG_FORCE_CSE_SYNC
 	bool "Running tests; enforce CSE sync"
 	default n
 
+config GBB_FLAG_ENABLE_ADB
+	bool "Enable ADB"
+	default n
+
 endmenu # GBB
 
 menu "Vboot Keys"
diff --git a/src/security/vboot/Makefile.mk b/src/security/vboot/Makefile.mk
index eb75975d04..465205af42 100644
--- a/src/security/vboot/Makefile.mk
+++ b/src/security/vboot/Makefile.mk
@@ -267,6 +267,7 @@ GBB_FLAGS := $(call int-add, \
 	$(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_FWMP),0x8000) \
 	$(call bool-to-mask,$(CONFIG_GBB_FLAG_ENABLE_UDC),0x10000) \
 	$(call bool-to-mask,$(CONFIG_GBB_FLAG_FORCE_CSE_SYNC),0x20000) \
+	$(call bool-to-mask,$(CONFIG_GBB_FLAG_ENABLE_ADB),0x80000000) \
 	)
 
 ifneq ($(CONFIG_GBB_BMPFV_FILE),)