diff --git a/utils/pkgs/ykfde/default.nix b/utils/pkgs/ykfde/default.nix
index 283481a..54e9f86 100644
--- a/utils/pkgs/ykfde/default.nix
+++ b/utils/pkgs/ykfde/default.nix
@@ -1,5 +1,16 @@
-{ pkgs, lib, stdenv, makeWrapper }:
+{ pkgs,
+  lib,
+  stdenv,
+  makeWrapper,
+  openssl,
+  yubikey-personalization,
+  cryptsetup,
+}:
 
+let
+  inherit (nixpkgs) callPackage pkgs stdenv;
+  pbkdf2Sha512 = callPackage ./pbkdf2-sha512.nix { };
+in
 stdenv.mkDerivation {
   name = "ykfde";
   src = ./scripts;
@@ -7,4 +18,7 @@ stdenv.mkDerivation {
   installPhase = ''
     install -D --target $out/bin *
   '';
+  postInstall = ''
+    wrapProgram $out/bin/ykfde-enroll --prefix PATH : ${lib.makeBinPath [openssl, yubikey-personalization, cryptsetup, pbkdf2Sha512]}
+  '';
 }