diff --git a/hosts/legion/boot.nix b/hosts/legion/boot.nix
index d979c33..c17c65e 100644
--- a/hosts/legion/boot.nix
+++ b/hosts/legion/boot.nix
@@ -48,8 +48,8 @@
       consoleMode = "auto";
     };
     lanzaboote = {
-      enable = false;
-      pkiBundle = "/var/lib/sbctl";
+      enable = true;
+      pkiBundle = "/etc/secureboot";
     };
     plymouth.enable = true;
   };