diff --git a/meta-ohos-core/conf/distro/allscenarios-linux.conf b/meta-ohos-core/conf/distro/allscenarios-linux.conf
index acd19350c909b4e24fbb72bff61dbba15f763142..279871012d9cf811422d110b1a02e49f39e4082e 100644
--- a/meta-ohos-core/conf/distro/allscenarios-linux.conf
+++ b/meta-ohos-core/conf/distro/allscenarios-linux.conf
@@ -17,6 +17,8 @@ INIT_MANAGER = "systemd"
 # Remove some of the default Poky DISTRO_FEATURES we inherited, but do not use.
 DISTRO_FEATURES_remove = "nfc 3g pcmcia"
 
+IMAGE_INSTALL_append = " ${@bb.utils.contains('BOOTSCHEME_LABELS', 'optee', 'optee-client', '', d)} "
+
 PREFERRED_VERSION_linux-yocto = "5.10%"
 
 # Default to enabling serial debug console on RaspberryPi
diff --git a/meta-ohos-staging/recipes-security/optee/optee-client.bb b/meta-ohos-staging/recipes-security/optee/optee-client.bb
new file mode 100644
index 0000000000000000000000000000000000000000..2bbb282ad96e153a51fdb191fc55dd02e13677f5
--- /dev/null
+++ b/meta-ohos-staging/recipes-security/optee/optee-client.bb
@@ -0,0 +1,34 @@
+SUMMARY = "OPTEE Client"
+HOMEPAGE = "https://github.com/OP-TEE/optee_client"
+
+LICENSE = "BSD-2"
+LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=69663ab153298557a59c67a60a743e5b"
+
+PV = "3.7.0+git${SRCPV}"
+
+inherit python3native systemd
+
+SRC_URI = "git://github.com/OP-TEE/optee_client.git \
+           file://tee-supplicant.service"
+S = "${WORKDIR}/git"
+
+SRCREV = "bc0ec8ce1e4dc5ae23f4737ef659338b7cd408fe"
+
+SYSTEMD_SERVICE_${PN} = "tee-supplicant.service"
+
+do_install() {
+    oe_runmake install
+
+    install -D -p -m0755 ${S}/out/export/usr/sbin/tee-supplicant ${D}${sbindir}/tee-supplicant
+
+    install -D -p -m0644 ${S}/out/export/usr/lib/libteec.so.1.0 ${D}${libdir}/libteec.so.1.0
+    ln -sf libteec.so.1.0 ${D}${libdir}/libteec.so
+    ln -sf libteec.so.1.0 ${D}${libdir}/libteec.so.1
+
+    cp -a ${S}/out/export/usr/include ${D}/usr/
+
+    sed -i -e s:/etc:${sysconfdir}:g \
+              ${WORKDIR}/tee-supplicant.service
+
+    install -D -p -m0644 ${WORKDIR}/tee-supplicant.service ${D}${systemd_system_unitdir}/tee-supplicant.service
+}
diff --git a/meta-ohos-staging/recipes-security/optee/optee-client/tee-supplicant.service b/meta-ohos-staging/recipes-security/optee/optee-client/tee-supplicant.service
new file mode 100644
index 0000000000000000000000000000000000000000..ffb54d3900d28b05be0ef75d82824ec094da5058
--- /dev/null
+++ b/meta-ohos-staging/recipes-security/optee/optee-client/tee-supplicant.service
@@ -0,0 +1,10 @@
+[Unit]
+Description=TEE Supplicant
+
+[Service]
+User=root
+EnvironmentFile=-/etc/default/tee-supplicant
+ExecStart=/usr/sbin/tee-supplicant $OPTARGS
+
+[Install]
+WantedBy=basic.target