diff --git a/debian/control b/debian/control
index b72c0c1..3ea8290 100644
--- a/debian/control
+++ b/debian/control
@@ -5,6 +5,8 @@ Maintainer: Debian EFI Team <debian-efi@lists.debian.org>
 Uploaders: Steve McIntyre <93sam@debian.org>, Steve Langasek <vorlon@debian.org>
 Build-Depends: debhelper (>= 13),
  shim-unsigned (= 15.8-1),
+ shim-helpers-amd64-signed [amd64],
+ shim-helpers-arm64-signed [arm64],
 # sbsigntool before 0.9.2-2 had a horrid bug with checksum calculation
 # which broke our build
  sbsigntool (>= 0.9.2-2),
diff --git a/debian/rules b/debian/rules
index 0ae32fb..d5c87e6 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,12 +1,12 @@
 #! /usr/bin/make -f
 
+include /usr/share/dpkg/architecture.mk
+
 VERSION := $(shell LC_ALL=C dpkg-parsechangelog | grep ^Version: | cut -d ' ' -f 2)
 SHIM_VERSION := $(shell dpkg-query -f '$${Version}\n' -W shim-unsigned)
 SHIM_HELPERS_VERSION := $(shell dpkg-query -f '$${Version}\n' -W shim-helpers-$(DEB_HOST_ARCH)-signed)
 VENDOR := $(shell dpkg-vendor --query vendor)
 
-include /usr/share/dpkg/architecture.mk
-
 ifeq ($(DEB_HOST_ARCH),amd64)
 export EFI_ARCH := x64
 endif