diff --git a/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.c b/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.c
index f60c98ca43..aa86fdf301 100644
--- a/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.c
+++ b/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.c
@@ -67,9 +67,9 @@ EFI_SECURITY_ARCH_PROTOCOL  mSecurityStub = {
 EFI_STATUS
 EFIAPI
 SecurityStubAuthenticateState (
-  IN EFI_SECURITY_ARCH_PROTOCOL  *This,
-  IN UINT32                      AuthenticationStatus,
-  IN EFI_DEVICE_PATH_PROTOCOL    *File
+  IN CONST EFI_SECURITY_ARCH_PROTOCOL  *This,
+  IN UINT32                            AuthenticationStatus,
+  IN CONST EFI_DEVICE_PATH_PROTOCOL    *File
   )
 {
   if (File == NULL) {
diff --git a/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.h b/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.h
index 66f07192aa..ff4f9bcf5d 100644
--- a/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.h
+++ b/MdeModulePkg/Universal/SecurityStubDxe/SecurityStub.h
@@ -66,9 +66,9 @@
 EFI_STATUS
 EFIAPI
 SecurityStubAuthenticateState (
-  IN EFI_SECURITY_ARCH_PROTOCOL          *This,
+  IN CONST EFI_SECURITY_ARCH_PROTOCOL    *This,
   IN UINT32                              AuthenticationStatus,
-  IN  EFI_DEVICE_PATH_PROTOCOL           *File
+  IN CONST EFI_DEVICE_PATH_PROTOCOL      *File
   );
 
 /**