diff --git a/lit/docs/install/generating-keys.lit b/lit/docs/install/generating-keys.lit
index 55e6a85b..395e6c11 100644
--- a/lit/docs/install/generating-keys.lit
+++ b/lit/docs/install/generating-keys.lit
@@ -78,11 +78,11 @@
   keys. The \reference{concourse-web} needs to know about all of the public
   worker keys.  To pass all public worker keys to the \reference{concourse-web}
   create a file that contains all of the worker public keys. A common name for
-  this file is \code{authorized_worker_keys}. The file should look like this,
+  this file is \code{authorized_worker_keys.pub}. The file should look like this,
   with one public key per line.
 
   \codeblock{bash}{{
-  $ cat authorized_worker_keys
+  $ cat authorized_worker_keys.pub
   ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCgKtVnbGRJ7Y63QKoO+loS...
   ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDU6lA4gSRYIc4MXzphJ2l5...
   ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDgNU7KBz/QQusPO52pNcea...
diff --git a/lit/docs/install/web.lit b/lit/docs/install/web.lit
index f511c245..6d0a9f3b 100644
--- a/lit/docs/install/web.lit
+++ b/lit/docs/install/web.lit
@@ -40,7 +40,7 @@ as performing all pipeline scheduling. It's basically the brain of Concourse.
   \codeblock{bash}{{{
   CONCOURSE_SESSION_SIGNING_KEY=path/to/session_signing_key
   CONCOURSE_TSA_HOST_KEY=path/to/tsa_host_key
-  CONCOURSE_TSA_AUTHORIZED_KEYS=path/to/authorized_worker_keys
+  CONCOURSE_TSA_AUTHORIZED_KEYS=path/to/authorized_worker_keys.pub
   }}}
 
   Finally, \code{web} needs to know how to reach your Postgres database. This