diff --git a/rust/pvimg/src/cmd/test.rs b/rust/pvimg/src/cmd/test.rs
index 9a227dc3..c228d8e0 100644
--- a/rust/pvimg/src/cmd/test.rs
+++ b/rust/pvimg/src/cmd/test.rs
@@ -74,7 +74,11 @@ where
 
     let mut result = false;
     for path in host_key_documents {
-        let hkd = HkdLoader::load_and_verify(path, &NoVerifyHkd, HkdVersionSelection::Auto)?;
+        let hkd = HkdLoader::load_and_verify(
+            path,
+            &NoVerifyHkd,
+            HkdVersionSelection::Explicit(hdr.common.version.into()),
+        )?;
         if hdr.contains(hkd)? {
             result = true;
             log_println!(
diff --git a/rust/pvimg/src/pv_utils/se_hdr/brb.rs b/rust/pvimg/src/pv_utils/se_hdr/brb.rs
index 41c791c5..f8dcf899 100644
--- a/rust/pvimg/src/pv_utils/se_hdr/brb.rs
+++ b/rust/pvimg/src/pv_utils/se_hdr/brb.rs
@@ -12,7 +12,7 @@ use pv::request::openssl::pkey::{PKey, Private, Public};
 use pv::request::{seek_se_hdr_start, Aes256XtsKey, Confidential, SymKey, SymKeyType};
 use pv::static_assert;
 use serde::{Deserialize, Serialize};
-use utils::S390ToolsMetaData;
+use utils::{HkdVersion, S390ToolsMetaData};
 
 pub use super::hdr_v1::{SeHdrBinV1, SeHdrDataV1};
 pub use super::hdr_v2::{SeHdrBinV2, SeHdrDataV2};
@@ -65,6 +65,15 @@ pub enum SeHdrVersion {
     V2 = 0x200,
 }
 
+impl From<SeHdrVersion> for HkdVersion {
+    fn from(val: SeHdrVersion) -> Self {
+        match val {
+            SeHdrVersion::V1 => Self::Classical,
+            SeHdrVersion::V2 => Self::Hybrid,
+        }
+    }
+}
+
 impl Display for SeHdrVersion {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         write!(