diff --git a/pkg/compute/models/guest_actions.go b/pkg/compute/models/guest_actions.go
index 88b93a234b..1bd19d4765 100644
--- a/pkg/compute/models/guest_actions.go
+++ b/pkg/compute/models/guest_actions.go
@@ -805,7 +805,7 @@ func (self *SGuest) AllowPerformRevokeSecgroup(ctx context.Context, userCred mcc
 func (self *SGuest) saveDefaultSecgroupId(userCred mcclient.TokenCredential, secGrpId string) error {
 	if secGrpId != self.SecgrpId {
 		diff, err := db.Update(self, func() error {
-			self.SecgrpId = "default"
+			self.SecgrpId = secGrpId
 			return nil
 		})
 		if err != nil {