ria-labelledby=tabset-docsopsconfigurationtraffic-managementmanage-mesh-certificates-1-1-tab><pre><code class=language-yaml data-expandlinks=true data-repo=istio>pilot:
  env:
    CITADEL_SELF_SIGNED_CA_RSA_KEY_SIZE: 4096
</code></pre></div></div></div><h2 id=sidecars>Sidecars</h2><p>Since sidecars manage their own certificates for in-mesh communication, the sidecars
are responsible for managing their private keys and generated Certificate Signing Request (CSRs). The sidecar
injector needs to be modified to