diff --git a/salt/minion/cert/opencontrail/xmpp.yml b/salt/minion/cert/opencontrail/xmpp.yml
index 2c3b86e..3ed0adf 100644
--- a/salt/minion/cert/opencontrail/xmpp.yml
+++ b/salt/minion/cert/opencontrail/xmpp.yml
@@ -12,3 +12,6 @@
           cert_file: /etc/contrail/ssl/certs/server.pem
           ca_file: /etc/contrail/ssl/certs/ca-cert.pem
           signing_policy: cert_open
+          user: contrail
+          group: contrail
+          mode: 640