diff --git a/personal-cli/nixos.nix b/personal-cli/nixos.nix
index 7c6acea..9710580 100644
--- a/personal-cli/nixos.nix
+++ b/personal-cli/nixos.nix
@@ -39,7 +39,14 @@
 
   networking.networkmanager.enable = true;
 
+  security.tpm2 = {
+    enable = true;
+    pkcs11.enable = true;
+    tctiEnvironment.enable = true;
+  };
+
   users.users."${config.extraInfo.username}".extraGroups = [
+    "tss"
     "networkmanager"
     "libvirtd"
     "kvm"