diff --git a/pkg/render/logstorage/eck/eck.go b/pkg/render/logstorage/eck/eck.go
index 3c7c8aa085..f9d65d62b6 100644
--- a/pkg/render/logstorage/eck/eck.go
+++ b/pkg/render/logstorage/eck/eck.go
@@ -1,4 +1,4 @@
-// Copyright (c) 2024 Tigera, Inc. All rights reserved.
+// Copyright (c) 2024-2026 Tigera, Inc. All rights reserved.
 
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -363,9 +363,9 @@ func (e *eck) operatorStatefulSet() *appsv1.StatefulSet {
 							"--container-registry=" + e.cfg.Installation.Registry,
 							"--max-concurrent-reconciles=3",
 							"--ca-cert-validity=8760h",
-							"--ca-cert-rotate-before=24h",
+							"--ca-cert-rotate-before=720h",
+							"--cert-rotate-before=720h",
 							"--cert-validity=8760h",
-							"--cert-rotate-before=24h",
 							"--enable-webhook=false",
 							"--manage-webhook-certs=false",
 						},
diff --git a/pkg/render/logstorage/eck/eck_test.go b/pkg/render/logstorage/eck/eck_test.go
index 05148adad4..0ea1d5a33d 100644
--- a/pkg/render/logstorage/eck/eck_test.go
+++ b/pkg/render/logstorage/eck/eck_test.go
@@ -108,9 +108,9 @@ var _ = Describe("ECK rendering tests", func() {
 				"--container-registry=testregistry.com/",
 				"--max-concurrent-reconciles=3",
 				"--ca-cert-validity=8760h",
-				"--ca-cert-rotate-before=24h",
+				"--ca-cert-rotate-before=720h",
+				"--cert-rotate-before=720h",
 				"--cert-validity=8760h",
-				"--cert-rotate-before=24h",
 				"--enable-webhook=false",
 				"--manage-webhook-certs=false",
 			}))