diff --git a/plan-production-install.md b/plan-production-install.md
index 52a2749f1a..bc0b081572 100644
--- a/plan-production-install.md
+++ b/plan-production-install.md
@@ -229,15 +229,15 @@ You can also send the `--san` option to specify the SANs for a host.
 UCP uses named volumes for persistence of data. When installing UCP for
 production, you need to create the following volumes:
 
-| Volume name                | Data                                                                                                           |
-|:---------------------------|:---------------------------------------------------------------------------------------------------------------|
-| ucp-root-ca                | The certificate and key for the UCP root CA. Do not create this volume if you are using your own certificates. |
-| ucp-swarm-root-ca          | The certificate and key for the Swarm root CA.                                                                 |
-| ucp-server-certs           | The controller certificates for the UCP controllers web server.                                                |
-| ucp-swarm-node-certs       | The Swarm certificates for the current node (repeated on every node in the cluster).                           |
-| ucp-swarm-kv-certs         | The Swarm KV client certificates for the current node (repeated on every node in the cluster).                 |
-| ucp-swarm-controller-certs | The UCP Controller Swarm client certificates for the current node.                                             |
-| ucp-kv                     | Key value store persistence.                                                                                   |
+| Volume name                 | Data                                                                                                           |
+|:----------------------------|:---------------------------------------------------------------------------------------------------------------|
+| ucp-client-root-ca          | The certificate and key for the UCP root CA. Do not create this volume if you are using your own certificates. |
+| ucp-cluster-root-ca         | The certificate and key for the Swarm root CA.                                                                 |
+| ucp-controller-server-certs | The controller certificates for the UCP controllers web server.                                                |
+| ucp-node-certs              | The Swarm certificates for the current node (repeated on every node in the cluster).                           |
+| ucp-kv-certs                | The Swarm KV client certificates for the current node (repeated on every node in the cluster).                 |
+| ucp-controller-client-certs | The UCP Controller Swarm client certificates for the current node.                                             |
+| ucp-kv                      | Key value store persistence.                                                                                   |
 
 If you don't create these volumes, the `ucp install` command creates them for
 you with the default volume driver and flags.
diff --git a/production-install.md b/production-install.md
index b3145dd23c..1a64ed43cc 100644
--- a/production-install.md
+++ b/production-install.md
@@ -151,7 +151,7 @@ To install UCP with your own external root CA:
 
 1. Log into the machine where you intend to install UCP.
 
-2. Make sure you have created a named volume called `ucp-server-certs`.
+2. Make sure you have created a named volume called `ucp-controller-server-certs`.
 
 3. Add the following files to the volume's top-level directory:
 
diff --git a/reference/install.md b/reference/install.md
index 15eff6c060..c9d656a812 100644
--- a/reference/install.md
+++ b/reference/install.md
@@ -33,7 +33,7 @@ ports:
 
 You can optionally use an externally generated and signed certificate for the
 UCP controller by using the `--external-ucp-ca`. Create a storage volume named
-`ucp-server-certs` with ca.pem, cert.pem, and key.pem in the root directory
+`ucp-controller-server-certs` with ca.pem, cert.pem, and key.pem in the root directory
 before running the install.
 
 A license file can optionally be added during install by volume