diff --git a/Kconfig.nrf b/Kconfig.nrf
index eb8b5e73dc6b..9500ed3ea4cc 100644
--- a/Kconfig.nrf
+++ b/Kconfig.nrf
@@ -117,7 +117,8 @@ config NRF_SECURITY_ENABLER
 	def_bool y
 	imply NRF_SECURITY if BT_CRYPTO || BT_HOST_CRYPTO || BT_MESH_USES_MBEDTLS_PSA || BT_FAST_PAIR_CRYPTO_PSA
 	imply ENTROPY_GENERATOR if BOARD_NATIVE_SIM
-	imply PSA_WANT_GENERATE_RANDOM if BT_HOST_CRYPTO_PRNG
+	imply PSA_WANT_GENERATE_RANDOM if BT_HOST_CRYPTO_PRNG || BT_ECC
+	imply MBEDTLS_ENABLE_HEAP if BT_HOST_CRYPTO_PRNG || BT_ECC
 	depends on !SOC_NRF5340_CPUNET
 
 rsource "samples/Kconfig"