diff --git a/configure.ac b/configure.ac
index 890e43771..963a81fb9 100644
--- a/configure.ac
+++ b/configure.ac
@@ -2587,6 +2587,11 @@ then
     then
         AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_AES_DIRECT"
     fi
+
+    if test "$ENABLED_AESGCM_STREAM" = "yes"
+    then
+        AC_MSG_ERROR([--enable-aesgcm-stream is incompatible with --enable-kcapi.])
+    fi
 fi
 
 if test "$ENABLED_KCAPI_RSA" = "yes"