diff --git a/hosts/muon/configuration.nix b/hosts/muon/configuration.nix
index 5f191da..67d86ef 100644
--- a/hosts/muon/configuration.nix
+++ b/hosts/muon/configuration.nix
@@ -24,6 +24,7 @@ in {
     opensnitch
     opensnitch-ui
     mumble
+    swtpm # emulated TPM 2.0 on PATH for qemu:///session libvirtd (Windows 11)
   ];
 
   nixpkgs.config.permittedInsecurePackages = [