diff --git a/pkg/compute/models/guest_actions.go b/pkg/compute/models/guest_actions.go
index 8e9192e232..7d0f075da8 100644
--- a/pkg/compute/models/guest_actions.go
+++ b/pkg/compute/models/guest_actions.go
@@ -802,7 +802,7 @@ func (self *SGuest) AllowPerformRevokeSecgroup(ctx context.Context, userCred mcc
 func (self *SGuest) saveDefaultSecgroupId(userCred mcclient.TokenCredential, secGrpId string) error {
 	if secGrpId != self.SecgrpId {
 		diff, err := db.Update(self, func() error {
-			self.SecgrpId = "default"
+			self.SecgrpId = secGrpId
 			return nil
 		})
 		if err != nil {