diff --git a/configs/config-thread.h b/configs/config-thread.h
index 3193a04..fdfa64a 100644
--- a/configs/config-thread.h
+++ b/configs/config-thread.h
@@ -39,6 +39,7 @@
 
 /* mbed TLS feature support */
 #define MBEDTLS_AES_ROM_TABLES
+#define MBEDTLS_CMAC_C
 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
 #define MBEDTLS_ECP_NIST_OPTIM
 #define MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED