diff --git a/MdeModulePkg/Library/DxeSecurityManagementLib/DxeSecurityManagementLib.c b/MdeModulePkg/Library/DxeSecurityManagementLib/DxeSecurityManagementLib.c
index 1ff1bf6dfe..a23b747e41 100644
--- a/MdeModulePkg/Library/DxeSecurityManagementLib/DxeSecurityManagementLib.c
+++ b/MdeModulePkg/Library/DxeSecurityManagementLib/DxeSecurityManagementLib.c
@@ -20,9 +20,9 @@ WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
 
 #define SECURITY_HANDLER_TABLE_SIZE   0x10
 
-#define EFI_AUTH_OPERATION_MASK       EFI_AUTH_OPERATION_VERIFY_IMAGE \
+#define EFI_AUTH_OPERATION_MASK       (EFI_AUTH_OPERATION_VERIFY_IMAGE \
                                       | EFI_AUTH_OPERATION_DEFER_IMAGE_LOAD \
-                                      | EFI_AUTH_OPERATION_MEASURE_IMAGE
+                                      | EFI_AUTH_OPERATION_MEASURE_IMAGE)
 
 typedef struct {
   UINT32  SecurityOperation;