diff --git a/config/rekor.yaml b/config/rekor.yaml
index 6b52403f1ee30d847187428ce76f105c2478d9a0..848622301ad4ec49706ca7ae61ae38158040aac4 100644
--- a/config/rekor.yaml
+++ b/config/rekor.yaml
@@ -48,7 +48,14 @@ spec:
           "--redis_server.port=6379",
           "--trillian_log_server.tlog_id=3904496407287907110",
           "--log_type=prod",
+          "--rekor_server.signer=$(KMS)",
         ]
+        env:
+        - name: KMS
+          valueFrom:
+            configMapKeyRef:
+              name: rekor-config
+              key: kms
         resources:
           requests:
             memory: "1G"