diff --git a/kernel.spec b/kernel.spec
index bba1de394..929d7eb0c 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -561,9 +561,12 @@ BuildRequires: kabi-dw
 %if %{signkernel}%{signmodules}
 BuildRequires: openssl openssl-devel
 %if %{signkernel}
+%ifarch x86_64 aarch64
+BuildRequires: nss-tools
 BuildRequires: pesign >= 0.10-4
 %endif
 %endif
+%endif
 
 %if %{with_cross}
 BuildRequires: binutils-%{_build_arch}-linux-gnu, gcc-%{_build_arch}-linux-gnu