diff --git a/datacenter/ucp/2.0/guides/configuration/index.md b/datacenter/ucp/2.0/guides/configuration/index.md
index 6c9e527e69..d57b476de3 100644
--- a/datacenter/ucp/2.0/guides/configuration/index.md
+++ b/datacenter/ucp/2.0/guides/configuration/index.md
@@ -39,11 +39,11 @@ and click **Certificates**.
 
 Upload your certificates and keys:
 
-* A ca.pem file with the root CA public certificate.
-* A cert.pem file with the TLS certificate and any intermediate CA public
-certificates. This certificate should also have SANs for all addresses used to
-access UCP, including load balancers.
-* A key.pem file with TLS private key.
+* A `ca.pem` file with the root CA public certificate.
+* A `cert.pem` file with the TLS certificate for your domain and any intermediate public
+certificates, in this order.
+* A `key.pem` file with TLS private key. Make sure it is not encrypted with a password. 
+Encrypted keys should have `ENCRYPTED` in the first line.
 
 Finally, click **Update** for the changes to take effect.
 
diff --git a/datacenter/ucp/2.1/guides/admin/configure/use-your-own-tls-certificates.md b/datacenter/ucp/2.1/guides/admin/configure/use-your-own-tls-certificates.md
index da383df383..b3565628e4 100644
--- a/datacenter/ucp/2.1/guides/admin/configure/use-your-own-tls-certificates.md
+++ b/datacenter/ucp/2.1/guides/admin/configure/use-your-own-tls-certificates.md
@@ -39,11 +39,11 @@ and click **Certificates**.
 
 Upload your certificates and keys:
 
-* A ca.pem file with the root CA public certificate.
-* A cert.pem file with the TLS certificate and any intermediate CA public
-certificates. This certificate should also have SANs for all addresses used to
-access UCP, including load balancers.
-* A key.pem file with TLS private key.
+* A `ca.pem` file with the root CA public certificate.
+* A `cert.pem` file with the TLS certificate for your domain and any intermediate public
+certificates, in this order.
+* A `key.pem` file with TLS private key. Make sure it is not encrypted with a password. 
+Encrypted keys should have `ENCRYPTED` in the first line.
 
 Finally, click **Update** for the changes to take effect.