diff --git a/debian/changelog b/debian/changelog
index e3cc4c081..a17fe4762 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -33,6 +33,8 @@ linux (4.12.6-1) UNRELEASED; urgency=medium
   * rtlwifi: Fix memory leak when firmware request fails
   * rtlwifi: Fix fallback firmware loading (Closes: #869084)
   * [arm64] video: Enable FRAMEBUFFER_CONSOLE (Closes: #870071)
+  * integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS
+    (Closes: #869565)
 
   [ Salvatore Bonaccorso ]
   * packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
diff --git a/debian/config/config b/debian/config/config
index 632d3b402..0289bdafe 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -7091,7 +7091,8 @@ CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
 ## file: security/integrity/Kconfig
 ##
 CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_AUDIT=y
 
 ##