diff --git a/internal/app/wwctl/configure/tls/main.go b/internal/app/wwctl/configure/tls/main.go
index bffc4147..b84fe8a7 100644
--- a/internal/app/wwctl/configure/tls/main.go
+++ b/internal/app/wwctl/configure/tls/main.go
@@ -43,9 +43,15 @@ func CobraRunE(cmd *cobra.Command, args []string) error {
 		if err := util.CopyFile(sourceKey, keyFile); err != nil {
 			return fmt.Errorf("failed to import key: %w", err)
 		}
+		if err := os.Chmod(keyFile, 0600); err != nil {
+			return fmt.Errorf("failed to set key file permissions: %w", err)
+		}
 		if err := util.CopyFile(sourceCert, certFile); err != nil {
 			return fmt.Errorf("failed to import cert: %w", err)
 		}
+		if err := os.Chmod(certFile, 0644); err != nil {
+			return fmt.Errorf("failed to set cert file permissions: %w", err)
+		}
 		fmt.Fprintf(cmd.OutOrStdout(), "Imported keys from %s\n", importPath)
 
 		if err := configure.WAREWULFD(); err != nil {