anchor.diff:  
   The `generate-consul-certs` script outputs files to the `./consul-certs` 
   directory. 
  -You use the contents of these output files in [Step 3: Modify your Deployment Manifest](#manifest).
  +You use the contents of these output files in [Step 3: Create Stub File](#stub).
   
   ## <a id='encrypt-key'></a>Step 2: Generate encrypt_key ##
   
   Run `cat /dev/urandom | head -c 16 | base64` to generate and display a random 16-byte Base64-encoded value. 
  -You use this value as the `encrypt_key` in [Step 3: Modify your Deployment Manifest](#manifest).
  +You use this value as the `encrypt_key` in [Step 3: Create Stub File](#stub).
   
   Example:
   
  
positive.code: As of [cf-release v217](https://github.com/cloudfoundry/cf-release/releases/tag/v217), Cloud 
  Foundry enables encryption for all Consul traffic by default. 
  
  To use SSL encryption, you must generate and add the following certificates and keys to your deployment manifest: 
  
  * `ca_cert`
  * `agent_cert` and `agent_key`
  
negative.code: your deployment manifest. 
  Cloud Foundry encrypts transmitted Consul data using this `encrypt_key` value.
  
  If you do not want to use SSL encryption, set the `consul.require_ssl` property 
  to `false` in your deployment manifest.
  
  ## <a id='certificates'></a>Step 1: Generate Certificates and Keys ##
  
  