anchor.diff:    </tr>
     <tr>
       <td><pre><code>
  +  login:
  +    saml:
  +      serviceProviderKey: SAML_KEY
  +      serviceProviderKeyPassword: ''
  +      serviceProviderCertificate: SAML_CERT
  +    </code></pre></td>
  +    <td>
  +      Geneate SSL certificates for SAML and replace these values. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-certs</code> script in the cf-release repository to generate self-signed certificates.
  +    </td>
  +  </tr>
  +  <tr>
  +    <td><pre><code>
   jobs:
     - name: ha_proxy_z1
       networks:
  
positive.code:       verification_key: JWT_VERIFICATION_KEY
        signing_key: JWT_SIGNING_KEY
      </code></pre></td>
      <td>Generate a PEM-encoded RSA key pair, and replace <code>JWT_SIGNING_KEY</code> with the private key, and <code>JWT_VERIFICATION_KEY</code> with the corresponding public key. You can generate a key pair by running the following command:
  
        <code>ssh-keygen -f jwt-key.pem</code>. This command creates the  <code>jwt-key.pem.pub</code> file, which contains your public key, and the <code>jwt-key.pem</code> file, which contains your private key.<br/>
      Copy in the full keys with correct indentation, including the <code>BEGIN</code> and <code>END</code> delimiter lines.
      </td>
    </tr>
    <tr>
  
negative.code:     agent_key: CONSUL_AGENT_KEY
      </code></pre></td>
      <td>See the <a href="../common/consul-security.html">Security Configuration for Consul</a> topic. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-consul-certs</code> script in the cf-release repository to generate self-signed certificates.
      </td>
    </tr>
    <tr>
      <td><pre><code>
    etcd:
      require_ssl: true
      ca_cert: ETCD_CA_CERT
      client_cert: ETCD_CLIENT_CERT
      client_key: ETCD_CLIENT_KEY
      peer_ca_cert: ETCD_PEER_CA_CERT
      peer_cert: ETCD_PEER_CERT
      peer_key: ETCD_PEER_KEY
      server_cert: ETCD_SERVER_CERT
      server_key: ETCD_SERVER_KEY
      </code></pre></td>
      <td>
        Generate ssl certs for etcd and replace these values. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-etcd-certs</code> script in the cf-release repository to generate self signed certs.
      </td>
    </tr>
    <tr>
      <td><pre><code>
    loggregator:
      tls:
        ca_cert: LOGGREGATOR_CA_CERT
        doppler:
          cert: DOPPLER_CERT
          key: DOPPLER_KEY
        metron:
          cert: METRON_CERT
          key: METRON_KEY
        trafficcontroller:
          cert: TRAFFICCONTROLLER_CERT
          key: TRAFFICCONTROLLER_KEY
      </code></pre></td>
      <td>
         Generate ssl certs for loggregator and replace these values. You can use the <code>${WORK_DIR}/cf-release/scripts/generate-loggregator-certs</code> script in the cf-release repository to generate self signed certs.
      </td>
    </tr>
    <tr>
  