diff --git a/saml/univention-saml/conffiles/etc/apache2/sites-available/univention-saml.conf b/saml/univention-saml/conffiles/etc/apache2/sites-available/univention-saml.conf
index 662974b4c..20a0579e7 100755
--- a/saml/univention-saml/conffiles/etc/apache2/sites-available/univention-saml.conf
+++ b/saml/univention-saml/conffiles/etc/apache2/sites-available/univention-saml.conf
@@ -15,6 +15,17 @@ RewriteCond %{HTTPS} !=on
 RewriteRule ^/?simplesamlphp/(.*) https://%{SERVER_NAME}/simplesamlphp/$1 [R,L]
 '''
 @!@
+@!@
+import os.path
+cert_path = configRegistry.get('saml/idp/certificate/certificate', '')
+if os.path.isfile(cert_path):
+    print """<Directory {}>
+        <Files {}>
+                Require all granted
+        </Files>
+</Directory>
+""".format(*os.path.split(cert_path))
+@!@
 
 <Directory /usr/share/simplesamlphp/www/>
 	<FilesMatch ".+\.ph(p[345]?|t|tml)$">