diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 934ef0d14..479fc8d90 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -127,6 +127,10 @@ variables:
     - idf.py build
     - cp sdkconfig.defaults.c6_backup sdkconfig.defaults.esp32c6
 
+.build_controller_otbr_example: &build_controller_otbr_example
+    - cd $ESP_MATTER_PATH/examples/controller
+    - idf.py -D SDKCONFIG_DEFAULTS="sdkconfig.defaults.otbr" set-target esp32s3 build
+
 .build_examples_template:
   stage: build
   image: gitlab.espressif.cn:5050/app-frameworks/esp-matter/build-env:latest
@@ -225,6 +229,7 @@ build_esp_matter_examples_non_pytest_idf_v5_1:
   script:
     - *build_external_platform_example
     - *build_esp32c6_thread_example
+    - *build_controller_otbr_example
 
     # mfg_test_app needs an secure boot signing key, generating one here
     - cd ${ESP_MATTER_PATH}/examples/mfg_test_app
diff --git a/examples/controller/sdkconfig.defaults.otbr b/examples/controller/sdkconfig.defaults.otbr
index 6022066e5..5af29ae0a 100644
--- a/examples/controller/sdkconfig.defaults.otbr
+++ b/examples/controller/sdkconfig.defaults.otbr
@@ -34,6 +34,7 @@ CONFIG_MBEDTLS_CMAC_C=y
 CONFIG_MBEDTLS_KEY_EXCHANGE_ECJPAKE=y
 CONFIG_MBEDTLS_ECJPAKE_C=y
 CONFIG_MBEDTLS_SSL_PROTO_DTLS=y
+CONFIG_MBEDTLS_HKDF_C=y
 
 # MDNS platform
 CONFIG_USE_MINIMAL_MDNS=n