diff --git a/pkg/provider/kvm.go b/pkg/provider/kvm.go
index 46f813e..5d616ee 100644
--- a/pkg/provider/kvm.go
+++ b/pkg/provider/kvm.go
@@ -26,7 +26,7 @@ const KVMTemplate = `
     config:
       name: %s
       uefi: true
-      uefi-code: /usr/share/OVMF/OVMF_CODE.secboot.fd
+      uefi-code: %s
       uefi-vars: %s
       cdrom: %s
       boot: cdrom
@@ -132,8 +132,9 @@ func (p KVMProvider) New(mname, keyproject, UUID string) (Machine, error) {
 	// that's worth it.
 	provisionISO := filepath.Join(keysetDir, "artifacts", "provision.iso")
 	uefiVars := filepath.Join(keysetDir, "bootkit", "ovmf-vars.fd")
-	mData := fmt.Sprintf(KVMTemplate, m.Name, m.Name, uefiVars, provisionISO,
-		qcowPath, sudiPath)
+	uefiCode := filepath.Join(keysetDir, "bootkit", "ovmf", "ovmf-code.fd")
+	mData := fmt.Sprintf(KVMTemplate, m.Name, m.Name, uefiCode, uefiVars,
+		provisionISO, qcowPath, sudiPath)
 	stdout, stderr, err := utils.RunWithStdall(mData, "machine", "init", m.Name)
 	if err != nil {
 		return m, errors.Wrapf(err, "Failed initializing machine %q with data:%q\nOutput: %q\n%q\n", m.Name, mData, stdout, stderr)