diff --git a/base.nix b/base.nix
index 1766d02..26c2a67 100644
--- a/base.nix
+++ b/base.nix
@@ -233,8 +233,11 @@
   SERIAL_DEV_BUS = yes;
   SERIAL_DEV_CTRL_TTYPORT = yes;
 
+  HW_RANDOM = yes;
+
   TCG_TPM = yes;
   TCG_TPM2_HMAC = yes;
+  HW_RANDOM_TPM = yes;
   TCG_TIS = yes;
 
   WATCHDOG = yes;
diff --git a/disable.nix b/disable.nix
index 611ec00..ab7841b 100644
--- a/disable.nix
+++ b/disable.nix
@@ -25,6 +25,11 @@
   MOUSE_PS2_TRACKPOINT = option no;
   MOUSE_PS2_FOCALTECH = option no;
 
+  HW_RANDOM_TIMERIOMEM = option no;
+  HW_RANDOM_INTEL = option no;
+  HW_RANDOM_AMD = option no;
+  HW_RANDOM_VIA = option no;
+
   I2C_COMPAT = option no;
 
   SND_SOC_INTEL_ATOM_HIFI2_PLATFORM_ACPI = option no;
diff --git a/qemu-virtio.nix b/qemu-virtio.nix
index 6a3c3a0..a642529 100644
--- a/qemu-virtio.nix
+++ b/qemu-virtio.nix
@@ -17,7 +17,6 @@
   VIRTIO_NET = yes;
   VIRTIO_CONSOLE = yes;
 
-  HW_RANDOM = yes;
   HW_RANDOM_VIRTIO = yes;
 
   I6300ESB_WDT = yes;