diff --git a/nixops/chiron-hardware-configuration.nix b/nixops/chiron-hardware-configuration.nix
index fa6d8e97..f219ebe5 100644
--- a/nixops/chiron-hardware-configuration.nix
+++ b/nixops/chiron-hardware-configuration.nix
@@ -28,5 +28,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  hardware.cpu.intel.updateMicrocode = true;
+
   system.stateVersion = "19.03";
 }
diff --git a/nixops/franz-hardware-configuration.nix b/nixops/franz-hardware-configuration.nix
index f556c3dc..f9b25fb1 100644
--- a/nixops/franz-hardware-configuration.nix
+++ b/nixops/franz-hardware-configuration.nix
@@ -33,5 +33,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  hardware.cpu.intel.updateMicrocode = true;
+
   system.stateVersion = "21.05";
 }
diff --git a/nixops/hera-hardware-configuration.nix b/nixops/hera-hardware-configuration.nix
index 9ee3aab9..68f76051 100644
--- a/nixops/hera-hardware-configuration.nix
+++ b/nixops/hera-hardware-configuration.nix
@@ -28,5 +28,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  hardware.cpu.intel.updateMicrocode = true;
+
   system.stateVersion = "19.03";
 }
diff --git a/nixops/hestia-hardware-configuration.nix b/nixops/hestia-hardware-configuration.nix
index 38e758c2..a518af83 100644
--- a/nixops/hestia-hardware-configuration.nix
+++ b/nixops/hestia-hardware-configuration.nix
@@ -28,5 +28,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  hardware.cpu.intel.updateMicrocode = true;
+
   system.stateVersion = "19.03";
 }
diff --git a/nixops/zeus-hardware-configuration.nix b/nixops/zeus-hardware-configuration.nix
index a073f0c2..53370310 100644
--- a/nixops/zeus-hardware-configuration.nix
+++ b/nixops/zeus-hardware-configuration.nix
@@ -28,5 +28,7 @@
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  hardware.cpu.intel.updateMicrocode = true;
+
   system.stateVersion = "19.03";
 }