diff --git a/Makefile b/Makefile
index 3d2e049..24164c3 100644
--- a/Makefile
+++ b/Makefile
@@ -2,6 +2,7 @@ OS = $(shell uname -s)
 KRUNKIT_RELEASE = target/release/krunkit
 KRUNKIT_DEBUG = target/debug/krunkit
 LIBKRUN = libkrun.1.dylib
+FIRMWARE = edk2/KRUN_EFI.silent.fd
 
 PREFIX ?= /usr/local
 export PREFIX
@@ -15,7 +16,7 @@ debug: $(KRUNKIT_DEBUG)
 $(KRUNKIT_RELEASE):
 	cargo build --release
 ifeq ($(OS),Darwin)
-	install_name_tool -change $(LIBKRUN) $(PREFIX)/lib/$(LIBKRUN) $@
+	install_name_tool -change $(LIBKRUN) $(PREFIX)/lib/$(LIBKRUN) -add_rpath $(PREFIX)/lib $@
 	codesign --entitlements krunkit.entitlements --force -s - $@
 endif
 
@@ -25,6 +26,8 @@ $(KRUNKIT_DEBUG):
 install: $(KRUNKIT_RELEASE)
 	install -d $(DESTDIR)$(PREFIX)/bin
 	install -m 755 $(KRUNKIT_RELEASE) $(DESTDIR)$(PREFIX)/bin
+	install -d $(DESTDIR)$(PREFIX)/share/krunkit
+	install -m 644 $(FIRMWARE) $(DESTDIR)$(PREFIX)/share/krunkit
 
 clean:
 	cargo clean
diff --git a/krunkit.entitlements b/krunkit.entitlements
index a967593..e1dc790 100644
--- a/krunkit.entitlements
+++ b/krunkit.entitlements
@@ -4,7 +4,7 @@
 <dict>
 	<key>com.apple.security.hypervisor</key>
 	<true/>
-	<key>com.apple.security.cs.disable-library-validationr</key>
+	<key>com.apple.security.cs.disable-library-validation</key>
 	<true/>
 </dict>
 </plist>