diff --git a/src/soc/intel/alderlake/Kconfig b/src/soc/intel/alderlake/Kconfig
index 50fadefda8..937e3dbdea 100644
--- a/src/soc/intel/alderlake/Kconfig
+++ b/src/soc/intel/alderlake/Kconfig
@@ -71,7 +71,6 @@ config CPU_SPECIFIC_OPTIONS
 	select INTEL_GMA_ACPI
 	select INTEL_GMA_ADD_VBT if RUN_FSP_GOP
 	select INTEL_GMA_OPREGION_2_1
-	select INTEL_TME
 	select MRC_SETTINGS_PROTECT
 	select PARALLEL_MP_AP_WORK
 	select PLATFORM_USES_FSP2_2
diff --git a/src/soc/intel/common/block/cpu/Kconfig b/src/soc/intel/common/block/cpu/Kconfig
index ea81457466..d42824c4ce 100644
--- a/src/soc/intel/common/block/cpu/Kconfig
+++ b/src/soc/intel/common/block/cpu/Kconfig
@@ -110,7 +110,7 @@ config CPU_SUPPORTS_INTEL_TME
 config INTEL_TME
 	bool "Total Memory Encryption (TME)/Multi-key TME (MKTME)"
 	depends on CPU_SUPPORTS_INTEL_TME
-	default n
+	default y
 	help
 	 Enable Total Memory Encryption (TME)/Multi-key TME (MKTME). The spec is
 	 available at "https://software.intel.com/sites/default/files/managed/a5
diff --git a/src/soc/intel/meteorlake/Kconfig b/src/soc/intel/meteorlake/Kconfig
index a407be76ce..0550d734ef 100644
--- a/src/soc/intel/meteorlake/Kconfig
+++ b/src/soc/intel/meteorlake/Kconfig
@@ -34,7 +34,6 @@ config CPU_SPECIFIC_OPTIONS
 	select INTEL_DESCRIPTOR_MODE_CAPABLE
 	select INTEL_GMA_ACPI
 	select INTEL_GMA_ADD_VBT if RUN_FSP_GOP
-	select INTEL_TME
 	select IOAPIC
 	select MICROCODE_BLOB_UNDISCLOSED
 	select MRC_SETTINGS_PROTECT
diff --git a/src/soc/intel/tigerlake/Kconfig b/src/soc/intel/tigerlake/Kconfig
index 2f8c6d9500..7966a87e39 100644
--- a/src/soc/intel/tigerlake/Kconfig
+++ b/src/soc/intel/tigerlake/Kconfig
@@ -145,6 +145,9 @@ config IED_REGION_SIZE
 	hex
 	default 0x400000
 
+config INTEL_TME
+	default n
+
 config HEAP_SIZE
 	hex
 	default 0x10000