diff --git a/pkg/model/components/cilium.go b/pkg/model/components/cilium.go
index c72dec4e06..2a24100cae 100644
--- a/pkg/model/components/cilium.go
+++ b/pkg/model/components/cilium.go
@@ -149,7 +149,7 @@ func (b *CiliumOptionsBuilder) BuildOptions(o interface{}) error {
 		c.MemoryRequest = &defaultMemoryRequest
 	}
 
-	if c.EncryptionType == "" {
+	if c.EnableEncryption && c.EncryptionType == "" {
 		c.EncryptionType = kops.CiliumEncryptionTypeIPSec
 	}