diff --git a/lam/lib/modules/inetOrgPerson.inc b/lam/lib/modules/inetOrgPerson.inc
index 6f192e40..bfbf76b3 100644
--- a/lam/lib/modules/inetOrgPerson.inc
+++ b/lam/lib/modules/inetOrgPerson.inc
@@ -1875,7 +1875,7 @@ class inetOrgPerson extends baseModule implements passwordService {
 				$filename = 'userCertificate' . getRandomNumber() . '.der';
 				$pathOut = dirname(__FILE__) . '/../../tmp/' . $filename;
 				$out = @fopen($pathOut, "wb");
-				@chmod($pathOut, 0600);
+				@chmod($pathOut, 0640);
 				fwrite($out, $this->attributes['userCertificate;binary'][$i]);
 				fclose ($out);
 				$path = '../../tmp/' . $filename;
diff --git a/lam/lib/pdf.inc b/lam/lib/pdf.inc
index 0594362e..ea5304fc 100644
--- a/lam/lib/pdf.inc
+++ b/lam/lib/pdf.inc
@@ -165,7 +165,7 @@ function createModulePDF($accounts, $pdf_structure="default", $returnAsString =
 		$filename = '../../tmp/' . getRandomNumber() . time() .'.pdf';
 		// Save PDF
 		$pdf->Output($filename);
-		chmod($filename, 0600);
+		chmod($filename, 0640);
 		// return PDF file name
 		return $filename;
 	}