diff --git a/src/hsm/files.c b/src/hsm/files.c
index 545cfb4..30eaa49 100644
--- a/src/hsm/files.c
+++ b/src/hsm/files.c
@@ -210,14 +210,14 @@ file_t file_entries[] = {
                .type = FILE_TYPE_INTERNAL_EF | FILE_DATA_FLASH | FILE_PERSISTENT,
                .data = NULL,
                .ef_structure = FILE_EF_TRANSPARENT,
-               .acl = ACL_NONE },
+               .acl = ACL_RO },
     /* 27 */ { .fid = EF_EE_DEV, // End Entity Certificate Device
                .parent = 5,
                .name = NULL,
                .type = FILE_TYPE_INTERNAL_EF | FILE_DATA_FLASH | FILE_PERSISTENT,
                .data = NULL,
                .ef_structure = FILE_EF_TRANSPARENT,
-               .acl = ACL_NONE },
+               .acl = ACL_R_WP },
     /* 28 */ { .fid = EF_MKEK, // MKEK
                .parent = 5,
                .name = NULL,