diff --git a/meta-phosphor/conf/layer.conf b/meta-phosphor/conf/layer.conf
index 28d17d5..4600291 100644
--- a/meta-phosphor/conf/layer.conf
+++ b/meta-phosphor/conf/layer.conf
@@ -17,4 +17,6 @@
     aspeed-layer:${LAYERDIR}/dynamic-layers/aspeed-layer/recipes-*/*/*.bbappend \
     nuvoton-layer:${LAYERDIR}/dynamic-layers/nuvoton-layer/recipes-*/*/*.bb \
     nuvoton-layer:${LAYERDIR}/dynamic-layers/nuvoton-layer/recipes-*/*/*.bbappend \
+    tpm-layer:${LAYERDIR}/dynamic-layers/tpm-layer/recipes-*/*/*.bb \
+    tpm-layer:${LAYERDIR}/dynamic-layers/tpm-layer/recipes-*/*/*.bbappend \
 "
diff --git a/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend b/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend
new file mode 100644
index 0000000..06774b7
--- /dev/null
+++ b/meta-phosphor/dynamic-layers/tpm-layer/recipes-core/packagegroups/packagegroup-security-tpm2.bbappend
@@ -0,0 +1,3 @@
+# We don't need pkcs11 support on the BMC by default and it ends up causing a
+# dependency chain that brings in Rust.
+RDEPENDS:packagegroup-security-tpm2:remove = "tpm2-pkcs11"