diff --git a/modules/global/security.nix b/modules/global/security.nix
index 57cdb3e..dd5059c 100644
--- a/modules/global/security.nix
+++ b/modules/global/security.nix
@@ -1,5 +1,8 @@
 { config, lib, ... }:
 with lib;
+let
+  inherit (config.nixpkgs.hostPlatform) system;
+in
 {
   security = {
     sudo.wheelNeedsPassword = false;
@@ -18,8 +21,8 @@ with lib;
 
   hardware = {
     enableRedistributableFirmware = mkDefault true;
-    cpu.intel.updateMicrocode = mkDefault config.hardware.enableRedistributableFirmware;
-    cpu.amd.updateMicrocode = mkDefault config.hardware.enableRedistributableFirmware;
+    cpu.intel.updateMicrocode = mkDefault (config.hardware.enableRedistributableFirmware && system == "x86_64-linux");
+    cpu.amd.updateMicrocode = mkDefault (config.hardware.enableRedistributableFirmware && system == "x86_64-linux");
   };
 
   users.mutableUsers = false;