diff --git a/SPECS/kernel-mshv/config b/SPECS/kernel-mshv/config
index 5dd16c8daeb..7bdfa201034 100644
--- a/SPECS/kernel-mshv/config
+++ b/SPECS/kernel-mshv/config
@@ -6326,7 +6326,15 @@ CONFIG_PSTORE_COMPRESS=y
 # CONFIG_PSTORE_BLK is not set
 # CONFIG_SYSV_FS is not set
 # CONFIG_UFS_FS is not set
-# CONFIG_EROFS_FS is not set
+CONFIG_EROFS_FS=m
+# CONFIG_EROFS_FS_DEBUG is not set
+CONFIG_EROFS_FS_XATTR=y
+CONFIG_EROFS_FS_POSIX_ACL=y
+CONFIG_EROFS_FS_SECURITY=y
+CONFIG_EROFS_FS_ZIP=y
+# CONFIG_EROFS_FS_ZIP_LZMA is not set
+# CONFIG_EROFS_FS_ZIP_DEFLATE is not set
+# CONFIG_EROFS_FS_PCPU_KTHREAD is not set
 CONFIG_NETWORK_FILESYSTEMS=y
 CONFIG_NFS_FS=m
 CONFIG_NFS_V2=m
diff --git a/SPECS/kernel-mshv/kernel-mshv.signatures.json b/SPECS/kernel-mshv/kernel-mshv.signatures.json
index 5b173a13331..f5a4f3a40b3 100644
--- a/SPECS/kernel-mshv/kernel-mshv.signatures.json
+++ b/SPECS/kernel-mshv/kernel-mshv.signatures.json
@@ -3,7 +3,7 @@
     "50_mariner_mshv.cfg": "12bf23f8857f893549933a20062ad2a69c3c654b87893e8dd3ce42f9329801c7",
     "50_mariner_mshv_menuentry": "5a46bb273be0e829fec4e1f498b1a11b59ded6e14d42a19be7da860c3f4c35be",
     "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0",
-    "config": "5824f12c2fe2d5337414168640a9db0a2527c8cd4b3766b6074bf37028787c82",
+    "config": "65e61e9bf807350d739ee1f6beb3d1819eb2fc8801daf5f7cc33ba56f18b43c3",
     "kernel-mshv-6.6.137.mshv1.tar.gz": "1d4dbcf9768471fff5934899d8008a1260f225dc910e6dfd3e73f7d420b54b4a",
     "config_aarch64": "1377d8363a90820291c8146e3ad4df52ca7c676e28f1e2719a81a2b06178c269"
   }
diff --git a/SPECS/kernel-mshv/kernel-mshv.spec b/SPECS/kernel-mshv/kernel-mshv.spec
index c181a8b524e..e346fedc5b5 100644
--- a/SPECS/kernel-mshv/kernel-mshv.spec
+++ b/SPECS/kernel-mshv/kernel-mshv.spec
@@ -18,7 +18,7 @@
 Summary:        Mariner kernel that has MSHV Host support
 Name:           kernel-mshv
 Version:        6.6.137.mshv1
-Release:        2%{?dist}
+Release:        3%{?dist}
 License:        GPLv2
 Group:          Development/Tools
 Vendor:         Microsoft Corporation
@@ -267,6 +267,10 @@ echo "initrd of kernel %{uname_r} removed" >&2
 %{_includedir}/perf/perf_dlfilter.h
 
 %changelog
+* Thur Jun 04 2026 Cameron Baird <cameronbaird@microsoft.com> - 6.6.137.mshv1-3
+- Enable CONFIG_EROFS_FS and related features
+- for confidentiality and snapshot/restore scenarios
+
 * Wed May 13 2026 Saul Paredes <saulparedes@microsoft.com> - 6.6.137.mshv1-2
 - Enable missing configs per customer request