anchor.diff:      agent_key: CONSUL_AGENT_KEY
       </code></pre></td>
       <td>See the <a href="../common/consul-security.html">Security Configuration for Consul</a> topic. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-consul-certs</code> script in the cf-release repository to generate self-signed certificates.
  +    </td>
  +  </tr>
  +  <tr>
  +    <td><pre><code>
  +  etcd:
  +    require_ssl: true
  +    ca_cert: ETCD_CA_CERT
  +    client_cert: ETCD_CLIENT_CERT
  +    client_key: ETCD_CLIENT_KEY
  +    peer_ca_cert: ETCD_PEER_CA_CERT
  +    peer_cert: ETCD_PEER_CERT
  +    peer_key: ETCD_PEER_KEY
  +    server_cert: ETCD_SERVER_CERT
  +    server_key: ETCD_SERVER_KEY
  +    </code></pre></td>
  +    <td>
  +      Generate ssl certs for etcd and replace these values. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-etcd-certs</code> script in the cf-release repository to generate self signed certs.
  +    </td>
  +  </tr>
  +  <tr>
  +    <td><pre><code>
  +  loggregator:
  +    tls:
  +      ca_cert: LOGGREGATOR_CA_CERT
  +      doppler:
  +        cert: DOPPLER_CERT
  +        key: DOPPLER_KEY
  +      metron:
  +        cert: METRON_CERT
  +        key: METRON_KEY
  +      trafficcontroller:
  +        cert: TRAFFICCONTROLLER_CERT
  +        key: TRAFFICCONTROLLER_KEY
  +    </code></pre></td>
  +    <td>
  +       Generate ssl certs for loggregator and replace these values. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-loggregator-certs</code> script in the cf-release repository to generate self signed certs.
       </td>
     </tr>
     <tr>
  
positive.code:       verification_key: JWT_VERIFICATION_KEY
        signing_key: JWT_SIGNING_KEY
      </code></pre></td>
      <td>Generate a PEM-encoded RSA key pair, and replace <code>JWT_SIGNING_KEY</code> with the private key, and <code>JWT_VERIFICATION_KEY</code> with the corresponding public key. You can generate a key pair by running the following command:
  
        <code>ssh-keygen -f jwt-key.pem</code>. This command creates the  <code>jwt-key.pem.pub</code> file, which contains your public key, and the <code>jwt-key.pem</code> file, which contains your private key.<br/>
      Copy in the full keys with correct indentation, including the <code>BEGIN</code> and <code>END</code> delimiter lines.
      </td>
    </tr>
    <tr>
  
negative.code:   </tr>
    <tr>
      <td><pre><code>
    login:
      saml:
        serviceProviderKey: SAML_KEY
        serviceProviderKeyPassword: ''
        serviceProviderCertificate: SAML_CERT
      </code></pre></td>
      <td>
        Geneate SSL certificates for SAML and replace these values. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-certs</code> script in the cf-release repository to generate self-signed certificates.
      </td>
    </tr>
    <tr>
      <td><pre><code>
  jobs:
    - name: ha_proxy_z1
      networks:
  