diff --git a/common/mbedtls/config.h b/common/mbedtls/config.h
index 954817edc..d765574ed 100644
--- a/common/mbedtls/config.h
+++ b/common/mbedtls/config.h
@@ -1447,7 +1447,9 @@
  *
  * Enable the checkup functions (*_self_test).
  */
+#ifndef ON_DEVICE
 #define MBEDTLS_SELF_TEST
+#endif // ON_DEVICE
 
 /**
  * \def MBEDTLS_SHA256_SMALLER