anchor.diff:        serviceProviderCertificate: SAML_CERT
       </code></pre></td>
       <td>
  -      Generate SSL certificates for SAML and replace these values. You can use the <code>scripts/generate-certs</code> script in the <code>cf-release</code> repository to generate self-signed certificates.
  +        Generate a PEM-encoded RSA key pair. You can generate a key pair by running the command
  +        <code>openssl req -x509 -nodes -newkey rsa:2048 -days 365 -keyout key.pem -out cert.pem</code>
  +        This command creates <code>cert.pem</code>, which contains your public key, and <code>key.pem</code>,
  +        which contains your private key. Replace <code>SERVICE_PROVIDER_PRIVATE_KEY</code> with the full private key,
  +        including the <code>BEGIN</code> and <code>END</code> delimiter lines, under <code>serviceProviderKey</code>.</br>
  +        For RSA keys, you only need to configure the private key.
       </td>
     </tr>
     <tr>
  
positive.code:   </tr>
    <tr>
      <td><pre><code>
      sslCertificate: UAA_SERVER_CERT
      sslPrivateKey: UAA_SERVER_KEY
      </code></pre></td>
      <td>Replace <code>UAA_SERVER_CERT</code> and <code>UAA_SERVER_KEY</code> with UAA certificates. You can use the <code>scripts/generate-uaa-certs</code> script in the <code>cf-release</code> repository to generate self-signed certificates.</td>
      </td>
    </tr>
    <tr>
  
negative.code:       in the <code>cf-release</code> repository to generate self signed certs.
      </td>
    </tr>
  
    <tr>
      <td><pre><code>
    loggregator:
  