diff --git a/src/SignService/Services/KeyVaultAdminService.cs b/src/SignService/Services/KeyVaultAdminService.cs
index f09ed3da..c536595e 100644
--- a/src/SignService/Services/KeyVaultAdminService.cs
+++ b/src/SignService/Services/KeyVaultAdminService.cs
@@ -305,7 +305,7 @@ public async Task<CertificateOperation> CreateCsrAsync(string vaultName, string
             var policy = new CertificatePolicy("Unknown", $"CN={displayName}")
             {
                 KeyType = CertificateKeyType.RsaHsm,
-                KeySize = 4092
+                KeySize = 4096
             };
 
             var vault = await GetVaultAsync(vaultName).ConfigureAwait(false);