diff --git a/share/mk/src.opts.mk b/share/mk/src.opts.mk
index 75405c1bc05..d01472c7fae 100644
--- a/share/mk/src.opts.mk
+++ b/share/mk/src.opts.mk
@@ -212,6 +212,7 @@ __DEFAULT_NO_OPTIONS = \
     LOADER_VERIEXEC_PASS_MANIFEST \
     OFED_EXTRA \
     OPENLDAP \
+    OPENSSL_KTLS \
     RPCBIND_WARMSTART_SUPPORT \
     SORT_THREADS \
     SVN \
@@ -330,13 +331,6 @@ BROKEN_OPTIONS+=LOADER_UBOOT
 BROKEN_OPTIONS+=LOADER_GELI LOADER_LUA
 .endif
 
-# Kernel TLS is enabled by default on amd64
-.if ${__T} == "amd64"
-__DEFAULT_YES_OPTIONS+=OPENSSL_KTLS
-.else
-__DEFAULT_NO_OPTIONS+=OPENSSL_KTLS
-.endif
-
 .if ${__T:Mmips64*}
 # profiling won't work on MIPS64 because there is only assembly for o32
 BROKEN_OPTIONS+=PROFILE