diff --git a/main/templates/common/cert-policy-and-rbac.yaml b/main/templates/common/cert-policy-and-rbac.yaml
index a0fba0f..1961104 100644
--- a/main/templates/common/cert-policy-and-rbac.yaml
+++ b/main/templates/common/cert-policy-and-rbac.yaml
@@ -28,6 +28,7 @@ spec:
       - "signing"
       - "digital signature"
       - "server auth"
+      - "key encipherment"
 #  plugins:
 #    venafi:
 #      values: