diff --git a/telco-ran/configuration/hardening/api-server/75-api-server-encryption.yaml b/telco-ran/configuration/hardening/api-server/75-api-server-encryption.yaml
new file mode 100644
index 000000000..dac8543d1
--- /dev/null
+++ b/telco-ran/configuration/hardening/api-server/75-api-server-encryption.yaml
@@ -0,0 +1,7 @@
+apiVersion: config.openshift.io/v1
+kind: APIServer
+metadata:
+  name: cluster
+spec:
+  encryption:
+    type: aescbc