diff --git a/device.mk b/device.mk
index 15a6fee..8647bbf 100644
--- a/device.mk
+++ b/device.mk
@@ -45,6 +45,9 @@ PRODUCT_PACKAGES += \
 
 # HACK: Set vendor patch level
 PRODUCT_PROPERTY_OVERRIDES += \
-    ro.vendor.build.security_patch=2099-12-31 \
     ro.bootimage.build.date.utc=0 \
     ro.build.date.utc=0
+
+# OEM otacert
+PRODUCT_EXTRA_RECOVERY_KEYS += \
+    $(LOCAL_PATH)/security/ota
diff --git a/security/ota.x509.pem b/security/ota.x509.pem
new file mode 100644
index 0000000..2b59df9
--- /dev/null
+++ b/security/ota.x509.pem
@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----