tificates</a> document.</p><h2 id=istiod>istiod</h2><p>When Istio is installed without a root CA certificate, istiod will generate a self-signed
CA certificate using RSA 2048.</p><p>To change the self-signed CA certificate&rsquo;s bit length, you will need to modify either the IstioOperator manifest provided to
istioctl or the values file used during the Helm installation of the istio-discovery chart.</p><div><aside class="callout tip"><div class=type><svg class="large-icon"><use xlink:href="/v1.21/img/icon