diff --git a/mirrord-operator/templates/deployment.yaml b/mirrord-operator/templates/deployment.yaml
index a0db46a..a1790bf 100644
--- a/mirrord-operator/templates/deployment.yaml
+++ b/mirrord-operator/templates/deployment.yaml
@@ -44,6 +44,10 @@ spec:
         - name: OPERATOR_LICENSE_PATH
           value: /license/license.pem
         {{- else if .Values.license.key }}
+        {{- if .Value.agentTls }}
+        - name: OPERATOR_AGENT_CONNECTION_TLS
+          value: "true"
+        {{- end }}
         envFrom:
         - secretRef:
             name: {{ .Values.license.file.secret }}
diff --git a/mirrord-operator/values.yaml b/mirrord-operator/values.yaml
index 36b411f..94b763f 100644
--- a/mirrord-operator/values.yaml
+++ b/mirrord-operator/values.yaml
@@ -76,4 +76,8 @@ tls:
     tls.crt: ""
 
 # if you run on OpenShift, set this value to true to get a SCC in the yaml.
-openshift: false
\ No newline at end of file
+openshift: false
+
+# If you want the operator to secure agent connections with TLS, set this value to true.
+# This option requires agent version at least 3.97.0.
+agentTls: false