diff --git a/changelog.d/3-bug-fixes/lets-encrypt-default b/changelog.d/3-bug-fixes/lets-encrypt-default
new file mode 100644
index 0000000000..ba7c074d79
--- /dev/null
+++ b/changelog.d/3-bug-fixes/lets-encrypt-default
@@ -0,0 +1 @@
+In nginx-ingress-services chart, when enabling useCertManager, now correctly creates the required issuer by default.
diff --git a/charts/nginx-ingress-services/values.yaml b/charts/nginx-ingress-services/values.yaml
index cdad4fc02c..b76a61390d 100644
--- a/charts/nginx-ingress-services/values.yaml
+++ b/charts/nginx-ingress-services/values.yaml
@@ -37,8 +37,8 @@ tls:
   useCertManager: false
   # the validation depth between a federator client certificate and tlsClientCA
   verify_depth: 1
+  createIssuer: true
   issuer:
-    create: true
     name: letsencrypt-http01
     kind: Issuer # Issuer | ClusterIssuer