diff --git a/debian/dirs b/debian/dirs
new file mode 100644
index 0000000..ae5bbdc
--- /dev/null
+++ b/debian/dirs
@@ -0,0 +1 @@
+etc/kasmvnc
diff --git a/debian/postinst b/debian/postinst
index 0c099e2..c92f80a 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -17,17 +17,27 @@ set -e
 # for details, see https://www.debian.org/doc/debian-policy/ or
 # the debian-policy package
 
+kasmvnc_group="kasmvnc"
+
+create_kasmvnc_group() {
+  if ! getent group "$kasmvnc_group" >/dev/null; then
+          addgroup --quiet --system "$kasmvnc_group"
+  fi
+}
+
 make_self_signed_certificate() {
-  local cert_file=/etc/ssl/private/kasmvnc.pem
+  local cert_file=/etc/kasmvnc/server.pem
   [ -f "$cert_file" ] && return 0
 
   openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout "$cert_file" \
   -out "$cert_file" -subj \
   "/C=US/ST=VA/L=None/O=None/OU=DoFu/CN=kasm/emailAddress=none@none.none"
-  chgrp ssl-cert "$cert_file"
+  chgrp "$kasmvnc_group" "$cert_file"
   chmod g+r "$cert_file"
 }
 
+create_kasmvnc_group
+
 case "$1" in
     configure)
       bindir=/usr/bin
diff --git a/debian/postrm b/debian/postrm
index 7868e7a..2d34fa5 100644
--- a/debian/postrm
+++ b/debian/postrm
@@ -21,7 +21,7 @@ set -e
 
 case "$1" in
     purge)
-      rm -r /etc/ssl/private/kasmvnc.pem
+      rm -r /etc/kasmvnc
     ;;
     purge|remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
     ;;