diff --git a/testing/controller/controller.go b/testing/controller/controller.go
index 3e3e7ea3d9..342a86658e 100644
--- a/testing/controller/controller.go
+++ b/testing/controller/controller.go
@@ -47,6 +47,8 @@ type option struct {
 	setDefaultAuthMethodId       bool
 	setDefaultLoginName          bool
 	setDefaultPassword           bool
+	setRootKms                   bool
+	setWorkerAuthKms             bool
 	setRecoveryKms               bool
 	setDatabaseUrl               bool
 }
@@ -130,6 +132,22 @@ func WithDefaultPassword(pw string) Option {
 	}
 }
 
+func WithRootKms(wrapper wrapping.Wrapper) Option {
+	return func(c *option) error {
+		c.setRootKms = true
+		c.tcOptions.RootKms = wrapper
+		return nil
+	}
+}
+
+func WithWorkerAuthKms(wrapper wrapping.Wrapper) Option {
+	return func(c *option) error {
+		c.setWorkerAuthKms = true
+		c.tcOptions.WorkerAuthKms = wrapper
+		return nil
+	}
+}
+
 func WithRecoveryKms(wrapper wrapping.Wrapper) Option {
 	return func(c *option) error {
 		c.setRecoveryKms = true