diff --git a/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh b/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh
index 2bc29f5c..23fe6883 100644
--- a/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh
+++ b/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh
@@ -40,6 +40,7 @@ cp /tmp/allnodes /mnt/etc/ssh/shosts.equiv
 # carry over deployment configuration and api key for OS install action
 mkdir -p /mnt/etc/confluent
 chmod 700 /mnt/etc/confluent
+chmod 600 /tmp/confluent.*
 cp /tmp/confluent.* /mnt/etc/confluent/
 cp -a /tls /mnt/etc/confluent/
 cp -a /tls/* /mnt/var/lib/ca-certificates/openssl