diff --git a/images/daos-client-image.pkr.hcl b/images/daos-client-image.pkr.hcl
index 059fdbf..89054e1 100644
--- a/images/daos-client-image.pkr.hcl
+++ b/images/daos-client-image.pkr.hcl
@@ -51,7 +51,7 @@ source "googlecompute" "daos-client-hpc-centos-7" {
   zone                    = "${var.zone}"
   state_timeout           = "10m"
   use_internal_ip         = true
-  omit_external_ip        = true
+  omit_external_ip        = false
   use_iap                 = true
 }
 
@@ -77,8 +77,8 @@ build {
     inline = [
       "sudo mkdir -p /var/daos/cert_gen",
       "sudo mv /tmp/sm_get_ca.sh /var/daos/cert_gen",
-      "sudo chown -R root:root /var/daos/cert_gen",
-      "sudo chmod +x /var/daos/cert_gen/*.sh"
+      "sudo chmod +x /var/daos/cert_gen/*.sh",
+      "sudo chown -R root:root /var/daos/cert_gen"
     ]
   }
 
diff --git a/images/daos-server-image.pkr.hcl b/images/daos-server-image.pkr.hcl
index b8d8199..2238a50 100644
--- a/images/daos-server-image.pkr.hcl
+++ b/images/daos-server-image.pkr.hcl
@@ -51,7 +51,7 @@ source "googlecompute" "daos-server-centos-7" {
   zone                    = "${var.zone}"
   state_timeout           = "10m"
   use_internal_ip         = true
-  omit_external_ip        = true
+  omit_external_ip        = false
   use_iap                 = true
 }
 
@@ -77,8 +77,8 @@ build {
     inline = [
       "sudo mkdir -p /var/daos/",
       "sudo mv /tmp/cert_gen /var/daos/",
-      "sudo chown -R root:root /var/daos/cert_gen",
-      "sudo chmod +x /var/daos/cert_gen/*.sh"
+      "sudo chmod +x /var/daos/cert_gen/*.sh",
+      "sudo chown -R root:root /var/daos/cert_gen"
     ]
   }
 }