diff --git a/backend/internal/admin/service_units_test.go b/backend/internal/admin/service_units_test.go
index 711b3b5..b5e73b7 100644
--- a/backend/internal/admin/service_units_test.go
+++ b/backend/internal/admin/service_units_test.go
@@ -38,7 +38,7 @@ func TestScertSystemdUnitPolicy(t *testing.T) {
 		"RestrictSUIDSGID=yes",
 		"RemoveIPC=yes",
 		"SystemCallArchitectures=native",
-		"ReadWritePaths=/ssl/scert /scert/conf /scert/data /scert/log /scert/backups",
+		"ReadWritePaths=/scert/conf /scert/data /scert/log /scert/backups",
 		"[Install]",
 		"WantedBy=multi-user.target",
 	} {
diff --git a/deploy/systemd/Scert.service b/deploy/systemd/Scert.service
index b602ee1..c12d61d 100644
--- a/deploy/systemd/Scert.service
+++ b/deploy/systemd/Scert.service
@@ -39,7 +39,7 @@ RestrictRealtime=yes
 RestrictSUIDSGID=yes
 RemoveIPC=yes
 SystemCallArchitectures=native
-ReadWritePaths=/ssl/scert /scert/conf /scert/data /scert/log /scert/backups
+ReadWritePaths=/scert/conf /scert/data /scert/log /scert/backups
 # 初始化临时证书读取本机网卡地址需要 NETLINK_ROUTE，不授予网络管理能力。
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK