diff --git a/pkg/config/config.go b/pkg/config/config.go
index 8483707d1..47cf440cd 100644
--- a/pkg/config/config.go
+++ b/pkg/config/config.go
@@ -405,6 +405,10 @@ func NewConfigFromMap(data map[string]string) (*Config, error) {
 	case "", string(TrustDisabled):
 		// If DataplaneTrus is not set in the config-network, default is already
 		// set to TrustDisabled.
+		if nc.InternalEncryption {
+			// Backward compatibility
+			nc.DataplaneTrust = TrustMinimal
+		}
 	case string(TrustMinimal):
 		nc.DataplaneTrust = TrustMinimal
 	case string(TrustEnabled):
diff --git a/pkg/config/config_test.go b/pkg/config/config_test.go
index b572e7b06..389de74a6 100644
--- a/pkg/config/config_test.go
+++ b/pkg/config/config_test.go
@@ -285,6 +285,7 @@ func TestConfiguration(t *testing.T) {
 		wantConfig: func() *Config {
 			c := defaultConfig()
 			c.InternalEncryption = true
+			c.DataplaneTrust = TrustMinimal
 			return c
 		}(),
 	}, {