diff --git a/ubi/reboot-guard-enable.service b/ubi/reboot-guard-enable.service
new file mode 100644
index 0000000..7bd2873
--- /dev/null
+++ b/ubi/reboot-guard-enable.service
@@ -0,0 +1,7 @@
+[Unit]
+Description=Enable a guard that blocks BMC reboot
+
+[Service]
+Type=oneshot
+RemainAfterExit=no
+ExecStart=/usr/bin/obmc-flash-bmc rebootguardenable