diff --git a/root/etc/e-smith/db/configuration/defaults/letsencrypt/algorithm b/root/etc/e-smith/db/configuration/defaults/letsencrypt/algorithm
new file mode 100644
index 0000000..604bf74
--- /dev/null
+++ b/root/etc/e-smith/db/configuration/defaults/letsencrypt/algorithm
@@ -0,0 +1 @@
+rsa
\ No newline at end of file
diff --git a/root/etc/e-smith/templates/etc/dehydrated/config/45Algorithm b/root/etc/e-smith/templates/etc/dehydrated/config/45Algorithm
index bd84d5f..fdb08be 100644
--- a/root/etc/e-smith/templates/etc/dehydrated/config/45Algorithm
+++ b/root/etc/e-smith/templates/etc/dehydrated/config/45Algorithm
@@ -1,6 +1,6 @@
 # Which public key algorithm should be used? Supported: rsa, prime256v1 and secp384r1
 # KEY_ALGO=secp384r1 (default)
-#elliptic curve was not supported  (qpsmtpd and perl-IO-Socket-SSL < 1.95) 
+# elliptic curve was not supported  (qpsmtpd and perl-IO-Socket-SSL < 1.95)
 # SME 11 has perl-IO-Socket-SSL-2.066
-#KEY_ALGO=rsa
+KEY_ALGO="{$letsencrypt{algorithm}||rsa}"
 
diff --git a/smeserver-certificates.spec b/smeserver-certificates.spec
index 8d66581..eaa123c 100644
--- a/smeserver-certificates.spec
+++ b/smeserver-certificates.spec
@@ -1,6 +1,6 @@
 %define name smeserver-certificates
 %define version 11.0
-%define release 7
+%define release 8
 Summary: This is what smeserver-certificates does.
 Name: %{name}
 Version: %{version}
@@ -18,13 +18,17 @@ Requires: smeserver-release >= 11.0
 Requires: q
 Requires: jq
 Requires: dehydrated >= 0.6.5
-Requires: smeserver-manager >= 11.0.0-52
+Requires: smeserver-manager >= 11.0.0-110
 AutoReqProv: no
 
 %description
 
 
 %changelog
+* Mon Aug 25 2025 John Crisp <jcrisp@safeandsoundit.co.uk> 11.0-8.sme
+- Set KEY_ALFO default to rsa - thanks Knuddi [SME: 13109]
+- bump server-manager version
+
 * Fri Jun 27 2025 Brian Read <brianr@koozali.org> 11.0-7.sme
 - Bring default theme into line with changes made for AdminLTE theme [SME: 13049]