diff --git a/include/hardware/keymaster_defs.h b/include/hardware/keymaster_defs.h
index 49f65a9a..c0b3800e 100644
--- a/include/hardware/keymaster_defs.h
+++ b/include/hardware/keymaster_defs.h
@@ -212,8 +212,8 @@ typedef enum {
                                                         The value should interpreted as too's
                                                         complement signed integer. Negative values
                                                         indicate dates before Jan 1970 */
-
-
+    KM_TAG_MAX_BOOT_LEVEL = KM_UINT | 1010, /* Specifies a maximum boot level at which a key
+                                               should function. */
 } keymaster_tag_t;
 
 /**
@@ -512,6 +512,7 @@ typedef enum {
     KM_ERROR_MISSING_NOT_AFTER = -81,
     KM_ERROR_MISSING_ISSUER_SUBJECT = -82,
     KM_ERROR_INVALID_ISSUER_SUBJECT = -83,
+    KM_ERROR_BOOT_LEVEL_EXCEEDED = -84,
 
     KM_ERROR_UNIMPLEMENTED = -100,
     KM_ERROR_VERSION_MISMATCH = -101,