diff --git a/charts/spire/charts/spire-server/README.md b/charts/spire/charts/spire-server/README.md
index 24661b1..ec8ece3 100644
--- a/charts/spire/charts/spire-server/README.md
+++ b/charts/spire/charts/spire-server/README.md
@@ -23,6 +23,7 @@ A Helm chart to install the SPIRE server.
 | autoscaling.minReplicas | int | `1` |  |
 | autoscaling.targetCPUUtilizationPercentage | int | `80` |  |
 | bundleConfigMap | string | `"spire-server"` |  |
+| caKeyType | string | `"rsa-2048"` | The CA key type to use, possible values are rsa-2048, rsa-4096, ec-p256, ec-p384 (AWS requires the use of RSA.  EC cryptography is not supported) |
 | caTTL | string | `"24h"` |  |
 | ca_subject.common_name | string | `"example.org"` |  |
 | ca_subject.country | string | `"NL"` |  |
diff --git a/charts/spire/charts/spire-server/templates/configmap.yaml b/charts/spire/charts/spire-server/templates/configmap.yaml
index ea6022b..2350363 100644
--- a/charts/spire/charts/spire-server/templates/configmap.yaml
+++ b/charts/spire/charts/spire-server/templates/configmap.yaml
@@ -15,8 +15,7 @@ data:
 
       jwt_issuer = {{ .Values.jwtIssuer | quote }}
 
-      # AWS requires the use of RSA.  EC cryptography is not supported
-      ca_key_type = "rsa-2048"
+      ca_key_type = {{ .Values.caKeyType | quote }}
       ca_ttl = {{ .Values.caTTL | quote }}
 
       default_x509_svid_ttl = {{ .Values.defaultX509SvidTTL | quote }}
diff --git a/charts/spire/charts/spire-server/values.yaml b/charts/spire/charts/spire-server/values.yaml
index 4d8f514..ca5bf5d 100644
--- a/charts/spire/charts/spire-server/values.yaml
+++ b/charts/spire/charts/spire-server/values.yaml
@@ -178,6 +178,8 @@ extraContainers: []
 
 initContainers: []
 
+# -- The CA key type to use, possible values are rsa-2048, rsa-4096, ec-p256, ec-p384 (AWS requires the use of RSA.  EC cryptography is not supported)
+caKeyType: rsa-2048
 caTTL: 24h
 defaultX509SvidTTL: 4h
 defaultJwtSvidTTL: 1h