Rancher restore


I`m on Rancher. 2.8.2 with K8 1.27.x

When we try to restore an older backup from the S3 backup bucket.
We get this error:

4m29s Warning CannotRegenerateKey certificate/tls-rancher-ingress User intervention required: existing private key in Secret “tls-rancher-ingress” does not match requirements on Certificate resource, mismatching fields: [spec.privateKey.size], but cert-manager cannot create new private key as the Certificate’s .spec.privateKey.rotationPolicy is unset or set to Never. To allow cert-manager to create a new private key you can set .spec.privateKey.rotationPolicy to ‘Always’ (this will result in the private key being regenerated every time a cert is renewed)

Any ideas?