diff --git a/hikey/BoardConfig.mk b/hikey/BoardConfig.mk
index 7c31ac7..5f03ddb 100644
--- a/hikey/BoardConfig.mk
+++ b/hikey/BoardConfig.mk
@@ -9,6 +9,7 @@
 BOARD_KERNEL_CMDLINE := androidboot.hardware=hikey firmware_class.path=/vendor/firmware efi=noruntime init=/init
 BOARD_KERNEL_CMDLINE += androidboot.boot_devices=soc/f723d000.dwmmc0
 BOARD_KERNEL_CMDLINE += console=ttyAMA3,115200 androidboot.console=ttyAMA3
+BOARD_KERNEL_CMDLINE += androidboot.verifiedbootstate=orange
 
 ifneq ($(TARGET_SENSOR_MEZZANINE),)
 BOARD_KERNEL_CMDLINE += overlay_mgr.overlay_dt_entry=hardware_cfg_$(TARGET_SENSOR_MEZZANINE)
diff --git a/hikey960/BoardConfig.mk b/hikey960/BoardConfig.mk
index 71a6273..32f2992 100644
--- a/hikey960/BoardConfig.mk
+++ b/hikey960/BoardConfig.mk
@@ -11,6 +11,7 @@
 BOARD_KERNEL_CMDLINE := androidboot.hardware=hikey960 firmware_class.path=/vendor/firmware efi=noruntime init=/init
 BOARD_KERNEL_CMDLINE += androidboot.boot_devices=soc/ff3b0000.ufs
 BOARD_KERNEL_CMDLINE += loglevel=15 androidboot.slot_suffix=_a
+BOARD_KERNEL_CMDLINE += androidboot.verifiedbootstate=orange
 
 ifeq ($(HIKEY960_ENABLE_AVF), true)
 # The GKI kernel set protected mode by default via gki_defconfig,