if (ret)
                        goto out;
                ret = wcn36xx_smd_ipv6_ns_offload(wcn, vif, true);
+               if (ret)
+                       goto out;
+               ret = wcn36xx_smd_gtk_offload(wcn, vif, true);
                if (ret)
                        goto out;
                ret = wcn36xx_smd_set_power_params(wcn, true);
        vif = wcn36xx_get_first_assoc_vif(wcn);
        if (vif) {
                wcn36xx_smd_set_power_params(wcn, false);
+               wcn36xx_smd_gtk_offload(wcn, vif, false);
                wcn36xx_smd_ipv6_ns_offload(wcn, vif, false);
                wcn36xx_smd_arp_offload(wcn, vif, false);
        }
 
 }
 #endif
 
+int wcn36xx_smd_gtk_offload(struct wcn36xx *wcn, struct ieee80211_vif *vif,
+                           bool enable)
+{
+       struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
+       struct wcn36xx_hal_gtk_offload_req_msg msg_body;
+       int ret;
+
+       mutex_lock(&wcn->hal_mutex);
+
+       INIT_HAL_MSG(msg_body, WCN36XX_HAL_GTK_OFFLOAD_REQ);
+
+       if (enable) {
+               memcpy(&msg_body.kek, vif_priv->rekey_data.kek, NL80211_KEK_LEN);
+               memcpy(&msg_body.kck, vif_priv->rekey_data.kck, NL80211_KCK_LEN);
+               msg_body.key_replay_counter =
+                       le64_to_cpu(vif_priv->rekey_data.replay_ctr);
+               msg_body.bss_index = vif_priv->bss_index;
+       } else {
+               msg_body.flags = WCN36XX_HAL_GTK_OFFLOAD_FLAGS_DISABLE;
+       }
+
+       PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
+
+       ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
+       if (ret) {
+               wcn36xx_err("Sending host_offload_arp failed\n");
+               goto out;
+       }
+       ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
+       if (ret) {
+               wcn36xx_err("host_offload_arp failed err=%d\n", ret);
+               goto out;
+       }
+out:
+       mutex_unlock(&wcn->hal_mutex);
+       return ret;
+}
+
 int wcn36xx_smd_rsp_process(struct rpmsg_device *rpdev,
                            void *buf, int len, void *priv, u32 addr)
 {
        case WCN36XX_HAL_START_SCAN_OFFLOAD_RSP:
        case WCN36XX_HAL_STOP_SCAN_OFFLOAD_RSP:
        case WCN36XX_HAL_HOST_OFFLOAD_RSP:
+       case WCN36XX_HAL_GTK_OFFLOAD_RSP:
                memcpy(wcn->hal_buf, buf, len);
                wcn->hal_rsp_len = len;
                complete(&wcn->hal_rsp_compl);