diff --git a/changelog.d/2-wire-builds/clean-old-system-images b/changelog.d/2-wire-builds/clean-old-system-images
new file mode 100644
index 000000000..0ef8e1cef
--- /dev/null
+++ b/changelog.d/2-wire-builds/clean-old-system-images
@@ -0,0 +1 @@
+Removed: old images not in use anymore from proc_system_containers.sh
diff --git a/changelog.d/3-deploy-builds/fix-mls-value b/changelog.d/3-deploy-builds/fix-mls-value
new file mode 100644
index 000000000..9103a7cd5
--- /dev/null
+++ b/changelog.d/3-deploy-builds/fix-mls-value
@@ -0,0 +1 @@
+Fixed: Enable MLS protocol in production and dev values for brig
diff --git a/offline/tasks/proc_system_containers.sh b/offline/tasks/proc_system_containers.sh
index 469afb512..636cbe590 100755
--- a/offline/tasks/proc_system_containers.sh
+++ b/offline/tasks/proc_system_containers.sh
@@ -32,14 +32,7 @@ quay.io/calico/pod2daemon-flexvol:v3.27.4
 quay.io/calico/kube-controllers:v3.27.4
 quay.io/calico/typha:v3.27.4
 quay.io/calico/apiserver:v3.27.4
-quay.io/jetstack/cert-manager-controller:v1.16.3
-quay.io/jetstack/cert-manager-cainjector:v1.16.3
-quay.io/jetstack/cert-manager-webhook:v1.16.3
-quay.io/jetstack/cert-manager-startupapicheck:v1.16.3
 docker.io/library/nginx:1.25.4-alpine
-bats/bats:1.11.1
-cr.step.sm/smallstep/step-ca:0.25.3-rc7
-registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0
 EOF
 }
 
diff --git a/values/wire-server/demo-values.example.yaml b/values/wire-server/demo-values.example.yaml
index 230fd6d7d..f12567827 100644
--- a/values/wire-server/demo-values.example.yaml
+++ b/values/wire-server/demo-values.example.yaml
@@ -55,7 +55,7 @@ brig:
       teamMemberWelcome: https://wire.example.com/download # change this
     enableFederation: false # Keep false unless federation is explicitly configured
     optSettings:
-      setEnableMLS: false # Enable for MLS protocol use
+      setEnableMLS: true # Enable for MLS protocol use
       setFederationDomain: example.com # change this per host deployment
       # Sync the domain with the 'host' variable in the sftd chart
       # Comment the next line (by adding '#' before it) if conference calling is not used
diff --git a/values/wire-server/prod-values.example.yaml b/values/wire-server/prod-values.example.yaml
index a0e8a2c67..31932fbe5 100644
--- a/values/wire-server/prod-values.example.yaml
+++ b/values/wire-server/prod-values.example.yaml
@@ -55,7 +55,7 @@ brig:
       teamMemberWelcome: https://wire.example.com/download # change this
     enableFederation: false # Keep false unless federation is explicitly configured
     optSettings:
-      setEnableMLS: false # Enable for MLS protocol use
+      setEnableMLS: true # Enable for MLS protocol use
       setFederationDomain: example.com # change this per host deployment
       # Sync the domain with the 'host' variable in the sftd chart
       # Comment the next line (by adding '#' before it) if conference calling is not used