diff --git a/pkgs/build-support/xen/default.nix b/pkgs/build-support/xen/default.nix
index 92899e44e8ed..91c8d3a29d3e 100644
--- a/pkgs/build-support/xen/default.nix
+++ b/pkgs/build-support/xen/default.nix
@@ -265,7 +265,7 @@ stdenv.mkDerivation (finalAttrs: {
     "--with-system-qemu"
     (if withSeaBIOS then "--with-system-seabios=${systemSeaBIOS.firmware}" else "--disable-seabios")
     (if withOVMF then "--with-system-ovmf=${OVMF.firmware}" else "--disable-ovmf")
-    (if withIPXE then "--with-system-ipxe=${ipxe}" else "--disable-ipxe")
+    (if withIPXE then "--with-system-ipxe=${ipxe.firmware}" else "--disable-ipxe")
     (enableFeature withFlask "xsmpolicy")
   ];
 
diff --git a/pkgs/by-name/ip/ipxe/package.nix b/pkgs/by-name/ip/ipxe/package.nix
index baf3e92a60b0..c69a99e60566 100644
--- a/pkgs/by-name/ip/ipxe/package.nix
+++ b/pkgs/by-name/ip/ipxe/package.nix
@@ -14,6 +14,7 @@
   embedScript ? null,
   additionalTargets ? { },
   additionalOptions ? [ ],
+  firmwareBinary ? "ipxe.efirom",
 }:
 
 let
@@ -130,8 +131,11 @@ stdenv.mkDerivation (finalAttrs: {
 
   enableParallelBuilding = true;
 
-  passthru.updateScript = unstableGitUpdater {
-    tagPrefix = "v";
+  passthru = {
+    firmware = "${finalAttrs.finalPackage}/${firmwareBinary}";
+    updateScript = unstableGitUpdater {
+      tagPrefix = "v";
+    };
   };
 
   meta = {