diff --git a/board/daisy/board.h b/board/daisy/board.h
index ba9c44854c..f8ca5cad56 100644
--- a/board/daisy/board.h
+++ b/board/daisy/board.h
@@ -22,6 +22,10 @@
 #define CONFIG_PANIC_NEW_STACK
 #define CONFIG_ASSERT_HELP
 
+/* compute RW firmware hash at startup */
+#define CONFIG_VBOOT
+#define CONFIG_VBOOT_HASH
+
 /* Allow dangerous commands all the time, since we don't have a write protect
  * switch. */
 /* TODO: (crosbug.com/p/9986) This is a serious security hole and should be
diff --git a/board/daisy/ec.tasklist b/board/daisy/ec.tasklist
index 91e4d353c0..c9785dd4a9 100644
--- a/board/daisy/ec.tasklist
+++ b/board/daisy/ec.tasklist
@@ -15,6 +15,7 @@
  */
 #define CONFIG_TASK_LIST \
 	TASK(WATCHDOG, watchdog_task, NULL) \
+	TASK(VBOOTHASH, vboot_hash_task, NULL) \
 	TASK(POWERLED, power_led_task, NULL) \
 	TASK(PMU_TPS65090_CHARGER, pmu_charger_task, NULL) \
 	TASK(KEYSCAN, keyboard_scan_task, NULL) \
diff --git a/board/snow/board.h b/board/snow/board.h
index 5d7c2dab2d..f84917a814 100644
--- a/board/snow/board.h
+++ b/board/snow/board.h
@@ -26,6 +26,10 @@
 #undef  CONFIG_TASK_PROFILING
 #define CONFIG_WATCHDOG_HELP
 
+/* compute RW firmware hash at startup */
+#define CONFIG_VBOOT
+#define CONFIG_VBOOT_HASH
+
 #ifndef __ASSEMBLER__
 
 /* By default, enable all console messages except keyboard */
diff --git a/board/snow/ec.tasklist b/board/snow/ec.tasklist
index 91e4d353c0..c9785dd4a9 100644
--- a/board/snow/ec.tasklist
+++ b/board/snow/ec.tasklist
@@ -15,6 +15,7 @@
  */
 #define CONFIG_TASK_LIST \
 	TASK(WATCHDOG, watchdog_task, NULL) \
+	TASK(VBOOTHASH, vboot_hash_task, NULL) \
 	TASK(POWERLED, power_led_task, NULL) \
 	TASK(PMU_TPS65090_CHARGER, pmu_charger_task, NULL) \
 	TASK(KEYSCAN, keyboard_scan_task, NULL) \