diff --git a/hw/ip/keymgr_dpe/rtl/keymgr_dpe_ctrl.sv b/hw/ip/keymgr_dpe/rtl/keymgr_dpe_ctrl.sv
index 4224fab5d823a..a4b2d38c77726 100644
--- a/hw/ip/keymgr_dpe/rtl/keymgr_dpe_ctrl.sv
+++ b/hw/ip/keymgr_dpe/rtl/keymgr_dpe_ctrl.sv
@@ -600,7 +600,7 @@ module keymgr_dpe_ctrl
   assign invalid_allow_child = ~active_slot_policy.allow_child;
 
   logic invalid_max_boot_stage;
-  assign invalid_max_boot_stage = active_slot_boot_stage == DpeNumBootStages - 1;
+  assign invalid_max_boot_stage = active_slot_boot_stage >= DpeNumBootStages - 1;
 
   // Check source validity
   logic invalid_src_slot;