diff --git a/core/embed/vendorheader/generate.sh b/core/embed/vendorheader/generate.sh
index c566911c5d..1ecd8f3239 100755
--- a/core/embed/vendorheader/generate.sh
+++ b/core/embed/vendorheader/generate.sh
@@ -7,6 +7,8 @@ for fn in *.json; do
     $BUILDVH vendor_${name}.json vendor_${name}.toif vendorheader_${name}_unsigned.bin
 done
 
-# sign dev vendor header
-cp -a vendorheader_unsafe_unsigned.bin vendorheader_unsafe_signed_dev.bin
-$BINCTL -D vendorheader_unsafe_signed_dev.bin
+# sign dev and QA vendor header
+for name in unsafe qa_DO_NOT_SIGN; do
+    cp -a vendorheader_${name}_unsigned.bin vendorheader_${name}_signed_dev.bin
+    $BINCTL -D vendorheader_${name}_signed_dev.bin
+done
diff --git a/core/embed/vendorheader/vendorheader_qa_DO_NOT_SIGN_signed_dev.bin b/core/embed/vendorheader/vendorheader_qa_DO_NOT_SIGN_signed_dev.bin
new file mode 100644
index 0000000000..bcfc1226e4
Binary files /dev/null and b/core/embed/vendorheader/vendorheader_qa_DO_NOT_SIGN_signed_dev.bin differ
diff --git a/core/embed/vendorheader/vendorheader_qa_DO_NOT_SIGN_unsigned.bin b/core/embed/vendorheader/vendorheader_qa_DO_NOT_SIGN_unsigned.bin
new file mode 100644
index 0000000000..ba6872ce10
Binary files /dev/null and b/core/embed/vendorheader/vendorheader_qa_DO_NOT_SIGN_unsigned.bin differ
diff --git a/core/embed/vendorheader/vendorheader_satoshilabs_unsigned.bin b/core/embed/vendorheader/vendorheader_satoshilabs_unsigned.bin
index 61f3106a05..2d97fda1de 100644
Binary files a/core/embed/vendorheader/vendorheader_satoshilabs_unsigned.bin and b/core/embed/vendorheader/vendorheader_satoshilabs_unsigned.bin differ
diff --git a/core/embed/vendorheader/vendorheader_unsafe_signed_dev.bin b/core/embed/vendorheader/vendorheader_unsafe_signed_dev.bin
index 9c4532ef36..36b7b4169b 100644
Binary files a/core/embed/vendorheader/vendorheader_unsafe_signed_dev.bin and b/core/embed/vendorheader/vendorheader_unsafe_signed_dev.bin differ
diff --git a/core/embed/vendorheader/vendorheader_unsafe_unsigned.bin b/core/embed/vendorheader/vendorheader_unsafe_unsigned.bin
index aa4f5d0a5a..53d33bac98 100644
Binary files a/core/embed/vendorheader/vendorheader_unsafe_unsigned.bin and b/core/embed/vendorheader/vendorheader_unsafe_unsigned.bin differ