diff --git a/pkg/phases/certmanager/install.go b/pkg/phases/certmanager/install.go
index a83688fa4..4927df068 100644
--- a/pkg/phases/certmanager/install.go
+++ b/pkg/phases/certmanager/install.go
@@ -29,6 +29,9 @@ const (
 )
 
 func PreInstall(p *platform.Platform) error {
+	if p.CertManager.Disabled {
+		return nil
+	}
 	client, err := p.Client.GetClientset()
 	if err != nil {
 		return err
@@ -99,6 +102,9 @@ func PreInstall(p *platform.Platform) error {
 }
 
 func Install(p *platform.Platform) error {
+	if p.CertManager.Disabled {
+		return nil
+	}
 	//remove old mutating webhooks
 	_ = p.DeleteByKind(constants.MutatingWebhookConfiguration, v1.NamespaceAll, WebhookService)
 
diff --git a/pkg/types/types.go b/pkg/types/types.go
index e1e68d150..dfb3a0b8e 100644
--- a/pkg/types/types.go
+++ b/pkg/types/types.go
@@ -28,8 +28,8 @@ type GCP struct {
 }
 
 type CertManager struct {
-	Version string `yaml:"version" json:"version"`
-
+	Version  string `yaml:"version" json:"version"`
+	Disabled bool   `yaml:"disabled,omitempty" json:"disabled,omitempty"`
 	// Details of a vault server to use for signing ingress certificates
 	Vault *VaultClient `yaml:"vault,omitempty" json:"vault,omitempty"`
 	// Details of a Letsencrypt issuer to use for signing ingress certificates