diff --git a/getting-started/templates/systemlink-secrets.yaml b/getting-started/templates/systemlink-secrets.yaml
index 381ae2d4..30b75c24 100644
--- a/getting-started/templates/systemlink-secrets.yaml
+++ b/getting-started/templates/systemlink-secrets.yaml
@@ -106,10 +106,13 @@ userservices:
       ## Refer to the MongoDB documentation for key generation: https://www.mongodb.com/docs/manual/tutorial/enforce-keyfile-access-control-in-existing-replica-set/#create-a-keyfile
       ##
       replicaSetKey: ""  # <ATTENTION>
-      ## A list of API keys. These keys are used to authorize service-to-service interactions within the application.
-      ## Each entry must provide the name of the service assigned this key, the key, and a SHA-512 hash of the key.
-      ## More information can be found at: https://github.com/ni/install-systemlink-enterprise/blob/main/getting-started/secrets.md
-      ##
+    ## Cryptographic key used for AEAD encryption of continuation tokens. Use a 32-byte cryptographically random value which is base64 encoded.
+    ##
+    continuationTokenEncryptionKey: "" # <ATTENTION>
+    ## A list of API keys. SystemLink uses these keys to authorize service-to-service interactions within the application.
+    ## Each entry must provide the key, the name of the assigned service, and a SHA-512 hash of the key.
+    ## For more information visit https://github.com/ni/install-systemlink-enterprise/blob/main/getting-started/secrets.md
+    ##
     whitelistedApiKeys: # <ATTENTION>
       - serviceName: "assetservice"
         key: ""