diff --git a/modules/nitrokey.nix b/modules/nitrokey.nix
index 4862cf6..eecdce6 100644
--- a/modules/nitrokey.nix
+++ b/modules/nitrokey.nix
@@ -5,9 +5,9 @@
 { config, lib, pkgs, ... }:
 
 lib.mkMerge [
-  {
+  (lib.mkIf (!config.sbruder.machine.isVm) {
     hardware.nitrokey.enable = true;
-  }
+  })
   (lib.mkIf config.sbruder.gui.enable {
     environment.systemPackages = with pkgs; [
       # both depend on pypemicro, which is not needed, but nixpkgs requires it