diff --git a/.gitignore b/.gitignore
index e69de29..7b32c25 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1,2 @@
+/ce98be9d15ac2df062726b4451f0ec0c0b27fbf2.tar.gz
+/secvarctl-1.1.0.tar.gz
diff --git a/gating.yaml b/gating.yaml
new file mode 100644
index 0000000..5bb2e63
--- /dev/null
+++ b/gating.yaml
@@ -0,0 +1,6 @@
+--- !Policy
+product_versions:
+  - rhel-9
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: manual.sst_cs_bootloaders.secvarctl.functional}
diff --git a/secvarctl.spec b/secvarctl.spec
new file mode 100644
index 0000000..358ef93
--- /dev/null
+++ b/secvarctl.spec
@@ -0,0 +1,48 @@
+Name:		    secvarctl
+Version:	    1.1.0
+Release:	    %autorelease
+Summary:	    Suite of tools to manipulate and generate Secure Boot variables on POWER
+License:	    Apache-2.0
+URL:		    https://github.com/open-power/secvarctl
+Source0:	    %{url}/archive/v%{version}/%{name}-%{version}.tar.gz
+Source1:        https://github.com/ibm/libstb-secvar/archive/ce98be9d15ac2df062726b4451f0ec0c0b27fbf2.tar.gz
+
+BuildRequires:	gcc
+BuildRequires:	cmake
+BuildRequires:	openssl-devel
+BuildRequires:  libasan
+
+Provides:       bundled(libstb-secvar)
+
+%description
+Suite of tools to manipulate and generate Secure Boot variables on POWER.
+
+The purpose of this tool is to simplify and automate the process of reading and
+writing secure boot keys. secvarctl allows the user to communicate, via terminal
+commands, with the keys efficiently. It is supporting automate process of the
+both host and guest secure boot keys.
+
+%prep
+%autosetup -p1
+tar xf %{SOURCE1} -C external/libstb-secvar --strip-components=1
+
+%build
+%cmake -DCMAKE_BUILD_TYPE=Release
+%cmake_build
+
+%install
+%cmake_install
+
+%check
+%ifarch ppc64le
+make check
+%endif
+
+%files
+%license LICENSE
+%doc README.md
+%{_bindir}/%{name}
+%{_mandir}/man1/%{name}.1*
+
+%changelog
+%autochangelog
diff --git a/sources b/sources
new file mode 100644
index 0000000..aafcad4
--- /dev/null
+++ b/sources
@@ -0,0 +1,2 @@
+SHA512 (ce98be9d15ac2df062726b4451f0ec0c0b27fbf2.tar.gz) = 7cec0b1b6d5829086df380202f28f947824122c83ea76745623809b4dff2430efe6617b3e0b53f325ac67c86ed83a154b66a163c903091eb8b1dd8fc99ad8102
+SHA512 (secvarctl-1.1.0.tar.gz) = eededf0c07391365188a42d9d0e8893767b5fb7689002acdf6d9addbaa7078d616d9a902b6909e7f2e6962a0b6dfedceeb298ae42b69bce291dbf0ee692e7a0c