diff --git a/pki/pki.go b/pki/pki.go
index 72350cd6..87e4842e 100644
--- a/pki/pki.go
+++ b/pki/pki.go
@@ -832,6 +832,13 @@ func (p *PKI) GenerateConfig(opt ...Option) (*authconfig.Config, error) {
 // Save stores the pki on a json file that will be used as the certificate
 // authority configuration.
 func (p *PKI) Save(opt ...Option) error {
+	// Write pre-generated files.
+	for fn, b := range p.Files {
+		if err := fileutil.WriteFile(fn, b, 0600); err != nil {
+			return err
+		}
+	}
+
 	p.tellPKI()
 
 	// Generate and write ca.json