diff --git a/rk3588/BoardConfig-security-base.mk b/rk3588/BoardConfig-security-base.mk
new file mode 100644
index 0000000..adb9813
--- /dev/null
+++ b/rk3588/BoardConfig-security-base.mk
@@ -0,0 +1,11 @@
+#!/bin/bash
+export RK_LOADER_UPDATE_SPL=true
+
+# ramboot config
+export RK_CFG_RAMBOOT=rockchip_rk3588_ramboot
+# Set ramboot image type
+export RK_RAMBOOT_TYPE=CPIO
+# Define enable RK SECUREBOOT
+export RK_RAMDISK_SECURITY_BOOTUP=true
+export RK_SECURITY_OTP_DEBUG=true
+export RK_SYSTEM_CHECK_METHOD=DM-V