diff --git a/src/security/vboot/Kconfig b/src/security/vboot/Kconfig
index e7744786f6..e202333aca 100644
--- a/src/security/vboot/Kconfig
+++ b/src/security/vboot/Kconfig
@@ -338,6 +338,10 @@ config GBB_FLAG_DISABLE_FWMP
 	bool "Disable Firmware Management Parameters (FWMP)"
 	default n
 
+config GBB_FLAG_ENABLE_UDC
+	bool "Enable USB Device Controller"
+	default n
+
 endmenu # GBB
 
 menu "Vboot Keys"
diff --git a/src/security/vboot/Makefile.inc b/src/security/vboot/Makefile.inc
index 4cf809016a..1703748da7 100644
--- a/src/security/vboot/Makefile.inc
+++ b/src/security/vboot/Makefile.inc
@@ -226,6 +226,7 @@ GBB_FLAGS := $(call int-add, \
 	$(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_LID_SHUTDOWN),0x1000) \
 	$(call bool-to-mask,$(CONFIG_GBB_FLAG_FORCE_MANUAL_RECOVERY),0x4000) \
 	$(call bool-to-mask,$(CONFIG_GBB_FLAG_DISABLE_FWMP),0x8000) \
+	$(call bool-to-mask,$(CONFIG_GBB_FLAG_ENABLE_UDC),0x10000) \
 	)
 
 ifneq ($(CONFIG_GBB_BMPFV_FILE),)