diff --git a/cps/config_sql.py b/cps/config_sql.py
index 8f0ab0857..d7208b37d 100644
--- a/cps/config_sql.py
+++ b/cps/config_sql.py
@@ -583,6 +583,7 @@ def get_encryption_key(key_path):
         try:
             with open(key_file, "wb") as f:
                 f.write(key)
+            os.chmod(key_file, 0o600)
         except PermissionError as e:
             error = e
     return key, error