diff --git a/openssh.spec b/openssh.spec
index ba485cf1c658800ba4c5df451e65006db95bb6de..da91ad96cc1037f2c113a18bdae5f8c3105c1f20 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -1,4 +1,4 @@
-%define anolis_release 2
+%define anolis_release 3
 # Do we want SELinux & Audit
 %if 0%{?!noselinux:1}
 %global WITH_SELINUX 1
@@ -49,7 +49,7 @@
 # libfido2 has strong dependecy on libcbor, but libcbor changes its soname too often,
 # which will lead to frequent rebuilds of libfido. providing a switch on libfido2 support
 # within openssh is a must-have choice.
-%bcond_with libfido2
+%bcond_without libfido2
 
 # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1
 %global openssh_ver 9.0p1
@@ -719,6 +719,9 @@ test -f %{sysconfig_anaconda} && \
 %endif
 
 %changelog
+* Mon Feb 20 2023 Funda Wang <fundawang@yeah.net> - 9.0p1-3
+- Enable libfido2 support
+
 * Fri Feb 17 2023 Funda Wang <fundawang@yeah.net> - 9.0p1-2
 - Add switch for libfido2 support