diff --git a/certs/qcom_x509.genkey b/certs/qcom_x509.genkey
new file mode 100644
index 000000000000..82717a4509a4
--- /dev/null
+++ b/certs/qcom_x509.genkey
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: GPL-2.0-only
+
+[ req ]
+default_bits = 4096
+distinguished_name = req_distinguished_name
+prompt = no
+string_mask = utf8only
+x509_extensions = myexts
+
+[ req_distinguished_name ]
+#O = Unspecified company
+CN = Build time autogenerated kernel key
+#emailAddress = unspecified.user@unspecified.company
+
+[ myexts ]
+basicConstraints=critical,CA:FALSE
+keyUsage=digitalSignature
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid