diff --git a/airoha/image/Makefile b/airoha/image/Makefile
index ae1076a9b0f7f2e8815e0dfcec11713e10c9119c..e3cd6fb044658de55bf1e41e78929b9d795175c6 100755
--- a/airoha/image/Makefile
+++ b/airoha/image/Makefile
@@ -40,8 +40,8 @@ define Device/Default-airoha-common
   IMAGE_LAST_LINK = -squashfs-sysupgrade.itb
   IMAGE/sysupgrade.itb = iopsys-fit-upgrade-image | iopsys-sign-image | create-last-link $$(IMAGE_LAST_LINK) last.itb
   IMAGES := sysupgrade.itb production.img
-  KERNEL := kernel-bin | lzma | generate-uboot-images | iowrt-kernel-fit lzma
-  KERNEL_INITRAMFS := kernel-bin | lzma | iowrt-kernel-fit lzma with-initrd
+  KERNEL := kernel-bin | lzma | generate-uboot-images | iowrt-kernel-fit lzma external-static
+  KERNEL_INITRAMFS := kernel-bin | lzma | iowrt-kernel-fit lzma external-static-with-initrd
   KERNEL_NAME := vmlinux
   DEVICE_UBI_LAYOUT := ubinize.cfg.in
   UBINIZE_OPTS := -m 2048 -p 131072 -s 2048
@@ -60,7 +60,7 @@ endef
 
 define Device/secure-boot
   SECURE_BOOT := 1
-  KERNEL := kernel-bin | lzma | iopsys-secure-boot | squashfs-hash | iowrt-kernel-fit lzma
+  KERNEL := kernel-bin | lzma | iopsys-secure-boot | squashfs-hash | iowrt-kernel-fit lzma external-static
   ARTIFACT/keys.tar := copy-keys
   ARTIFACT/efuse.bin := generate-rotpk-fuse
   ARTIFACTS += keys.tar efuse.bin