diff --git a/pkg/machinery/kernel/kernel.go b/pkg/machinery/kernel/kernel.go
index 2242f4b8b42..c5963ddfdfb 100644
--- a/pkg/machinery/kernel/kernel.go
+++ b/pkg/machinery/kernel/kernel.go
@@ -35,7 +35,7 @@ var DefaultArgs = []string{
 
 // SecureBootArgs returns the kernel commandline options required for secure boot.
 var SecureBootArgs = []string{
-	"lockdown=confidentiality",
+	"lockdown=integrity",
 }
 
 // Param represents a kernel system property.