diff --git a/scripts/vm/systemvm/injectkeys.sh b/scripts/vm/systemvm/injectkeys.sh
index 6a7a9f0fb58..a7bc37a986b 100755
--- a/scripts/vm/systemvm/injectkeys.sh
+++ b/scripts/vm/systemvm/injectkeys.sh
@@ -40,7 +40,8 @@ inject_into_iso() {
 copy_priv_key() {
   local newprivkey=$1
   diff -q $newprivkey $(dirname $0)/id_rsa.cloud && return 0
-  sudo cp -fb $newprivkey $(dirname $0)/id_rsa.cloud 
+  sudo cp -fb $newprivkey $(dirname $0)/id_rsa.cloud
+  sudo chmod 644 $(dirname $0)/id_rsa.cloud
   return $?
 }