diff --git a/tools/test_apps/security/secure_boot/sdkconfig.ci.00 b/tools/test_apps/security/secure_boot/sdkconfig.ci.00
index 2f672979c8..1f4a4c3af1 100644
--- a/tools/test_apps/security/secure_boot/sdkconfig.ci.00
+++ b/tools/test_apps/security/secure_boot/sdkconfig.ci.00
@@ -1,4 +1,5 @@
 # Secure Boot V2 - ESP-ECO3+
+CONFIG_IDF_TARGET="esp32"
 CONFIG_SECURE_BOOT=y
 CONFIG_ESP32_REV_MIN_3=y
 CONFIG_SECURE_BOOT_V2_ENABLED=y
diff --git a/tools/test_apps/security/secure_boot/sdkconfig.ci.01 b/tools/test_apps/security/secure_boot/sdkconfig.ci.01
index 808cd998d9..abeddeb28f 100644
--- a/tools/test_apps/security/secure_boot/sdkconfig.ci.01
+++ b/tools/test_apps/security/secure_boot/sdkconfig.ci.01
@@ -1,4 +1,5 @@
 # Secure Boot V1
+CONFIG_IDF_TARGET="esp32"
 CONFIG_SECURE_BOOT=y
 CONFIG_SECURE_BOOT_V1_ENABLED=y
 CONFIG_SECURE_BOOT_SIGNING_KEY="test_ecdsa_key.pem"
diff --git a/tools/test_apps/security/secure_boot/sdkconfig.ci.02 b/tools/test_apps/security/secure_boot/sdkconfig.ci.02
index 36d9e172a1..6bffba00d2 100644
--- a/tools/test_apps/security/secure_boot/sdkconfig.ci.02
+++ b/tools/test_apps/security/secure_boot/sdkconfig.ci.02
@@ -1,4 +1,5 @@
 # ECDSA App signing without secure boot
+CONFIG_IDF_TARGET="esp32"
 CONFIG_SECURE_SIGNED_APPS_NO_SECURE_BOOT=y
 CONFIG_SECURE_SIGNED_ON_BOOT_NO_SECURE_BOOT=y
 CONFIG_SECURE_BOOT_SIGNING_KEY="test_ecdsa_key.pem"
diff --git a/tools/test_apps/security/secure_boot/sdkconfig.ci.03 b/tools/test_apps/security/secure_boot/sdkconfig.ci.03
new file mode 100644
index 0000000000..90fcc44a69
--- /dev/null
+++ b/tools/test_apps/security/secure_boot/sdkconfig.ci.03
@@ -0,0 +1,5 @@
+# ESP32-S2 Secure Boot
+CONFIG_IDF_TARGET="esp32s2"
+CONFIG_SECURE_BOOT=y
+CONFIG_SECURE_BOOT_SIGNING_KEY="test_rsa_3072_key.pem"
+
diff --git a/tools/test_apps/security/secure_boot/sdkconfig.ci.04 b/tools/test_apps/security/secure_boot/sdkconfig.ci.04
new file mode 100644
index 0000000000..d2a5162afd
--- /dev/null
+++ b/tools/test_apps/security/secure_boot/sdkconfig.ci.04
@@ -0,0 +1,6 @@
+# ESP32-S2 Secure Boot & Flash Encryption (Release mode)
+CONFIG_IDF_TARGET="esp32s2"
+CONFIG_SECURE_BOOT=y
+CONFIG_SECURE_BOOT_SIGNING_KEY="test_rsa_3072_key.pem"
+CONFIG_SECURE_FLASH_ENC_ENABLED=y
+SECURE_FLASH_ENCRYPTION_MODE_RELEASE=y