diff --git a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
index 1f930e8a11..71de272bf2 100644
--- a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
+++ b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
@@ -1089,7 +1089,7 @@ ProcessVarWithPk (
       return Status;
     }
 
-    if (mPlatformMode != SETUP_MODE) {
+    if (mPlatformMode != SETUP_MODE || IsPk) {
       Status = VendorKeyIsModified ();
     }
   } else if (mPlatformMode == USER_MODE) {