diff --git a/manifests/kots-config.yaml b/manifests/kots-config.yaml
index 8c0d6a5a..16ef9c85 100644
--- a/manifests/kots-config.yaml
+++ b/manifests/kots-config.yaml
@@ -661,6 +661,11 @@ spec:
           default: "0"
           help_text: |-
             Specify if CARTO Self-hosted should check if the proxy certificate is valid or not.
+        - name: externalProxyCAConfigmapName
+          hidden: true
+          type: text
+          value: 'repl{{ PrivateCACert }}'
+          readonly: true
 
         ## SSO
         - name: ssoEnabled
diff --git a/manifests/kots-helm.yaml b/manifests/kots-helm.yaml
index 8a7264ed..e5ca59fc 100644
--- a/manifests/kots-helm.yaml
+++ b/manifests/kots-helm.yaml
@@ -356,7 +356,7 @@ spec:
           connectionString: '{{repl ConfigOption "externalProxyHost" }}'
           excludedDomains: '{{repl ConfigOption "externalProxyExcludedDomains" }}'
           sslRejectUnauthorized: repl{{ if ConfigOptionEquals "externalHttpsProxySslCertificateCheck" "0"}}falserepl{{ else }}truerepl{{ end }}
-          sslCAConfigmapName: '{{repl PrivateCACert }}'
+          sslCAConfigmapName: '{{repl ConfigOption "externalProxyCAConfigmapName" }}'
     - when: '{{repl ConfigOptionEquals "ssoEnabled" "1"}}'
       recursiveMerge: true
       values: