diff --git a/.gitmodules b/.gitmodules
index b48297f47..be852bb8e 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -289,3 +289,6 @@
 [submodule "src/external/bind9"]
 	path = src/external/bind9
 	url = ../darling-bind9.git
+[submodule "src/external/SecurityTokend"]
+	path = src/external/SecurityTokend
+	url = ../darling-SecurityTokend.git
diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 5b4cb62fa..f6e593b1e 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -216,6 +216,7 @@ include_directories(AFTER
 	${CMAKE_CURRENT_SOURCE_DIR}/DirectoryServices/include
 	${CMAKE_CURRENT_SOURCE_DIR}/ConfigurationProfiles/include
 	${CMAKE_CURRENT_SOURCE_DIR}/ImageIO/include
+	${CMAKE_CURRENT_SOURCE_DIR}/external/SecurityTokend/include
 )
 
 add_subdirectory(external/libkqueue)
@@ -426,6 +427,7 @@ add_subdirectory(external/libdispatch)
 # Requires a newer Security version
 #add_subdirectory(external/SmartCardServices)
 add_subdirectory(external/security)
+add_subdirectory(external/SecurityTokend)
 add_subdirectory(external/cctools)
 add_subdirectory(external/libauto)
 add_subdirectory(external/WTF)
diff --git a/src/external/SecurityTokend b/src/external/SecurityTokend
new file mode 160000
index 000000000..0e03767f9
--- /dev/null
+++ b/src/external/SecurityTokend
@@ -0,0 +1 @@
+Subproject commit 0e03767f94ae9aa57ffffd70d59d15fcac9b361c