diff --git a/release/sysinstall/config.c b/release/sysinstall/config.c
index 5c2e24a7203d..6199345c7e6e 100644
--- a/release/sysinstall/config.c
+++ b/release/sysinstall/config.c
@@ -516,6 +516,8 @@ configSecurityHigh(dialogMenuItem *self)
     variable_set2("sshd_enable", "YES", 1);
     variable_set2("portmap_enable", "NO", 1);
     variable_set2("nfs_server_enable", "NO", 1);
+    variable_set2("kern_securelevel_enable", "YES", 1);
+    variable_set2("kern_securelevel", "1", 1);
 
     if (self)
 	msgConfirm("High security settings have been selected.\n\n"
diff --git a/usr.sbin/sade/config.c b/usr.sbin/sade/config.c
index 5c2e24a7203d..6199345c7e6e 100644
--- a/usr.sbin/sade/config.c
+++ b/usr.sbin/sade/config.c
@@ -516,6 +516,8 @@ configSecurityHigh(dialogMenuItem *self)
     variable_set2("sshd_enable", "YES", 1);
     variable_set2("portmap_enable", "NO", 1);
     variable_set2("nfs_server_enable", "NO", 1);
+    variable_set2("kern_securelevel_enable", "YES", 1);
+    variable_set2("kern_securelevel", "1", 1);
 
     if (self)
 	msgConfirm("High security settings have been selected.\n\n"
diff --git a/usr.sbin/sysinstall/config.c b/usr.sbin/sysinstall/config.c
index 5c2e24a7203d..6199345c7e6e 100644
--- a/usr.sbin/sysinstall/config.c
+++ b/usr.sbin/sysinstall/config.c
@@ -516,6 +516,8 @@ configSecurityHigh(dialogMenuItem *self)
     variable_set2("sshd_enable", "YES", 1);
     variable_set2("portmap_enable", "NO", 1);
     variable_set2("nfs_server_enable", "NO", 1);
+    variable_set2("kern_securelevel_enable", "YES", 1);
+    variable_set2("kern_securelevel", "1", 1);
 
     if (self)
 	msgConfirm("High security settings have been selected.\n\n"