diff --git a/site/03-todo.md b/site/03-todo.md
index a6e22dc..1485600 100644
--- a/site/03-todo.md
+++ b/site/03-todo.md
@@ -1,13 +1,12 @@
-# ToDo
-- LAN Setup - Android - Screenshots of LAN setup and verify steps on an Android 12+ device
+# TODO
 - Update all guides in service repos
     - Service-specific Guides (link to wrapper repos)
-- Verify LAN setup steps on a Mac
-- Verify Tor setup steps on a Mac
-- Add / verify ALL links in the **UI** go to the right place in docs
+- Verify LAN and Tor setup steps on a Mac
 - Address build errors
+- Add / verify ALL links in the **UI** go to the right place in docs
 
 # BLOCKED:
+- LAN Setup - Android - Screenshots of LAN setup and verify steps on an Android 12+ device
 - Mission / values
 - Initial Setup
 - DIY Guide
@@ -27,3 +26,13 @@
 - Create badges for device guide topic boxes <connectivity, performance, resilience and/or tuning>
 - There are many issues that should be closed by 0.3 docs release (some issues await new processes in order to test)
 - Email signup
+
+
+- download "Embassy Local CA.crt" from settings (must be done over desktop/laptop Tor)
+- send cert to self via Telegram, email, cloud storage, etc
+- download cert on Android device
+- go to Settings -> Security -> Advanced -> Encryption and Credentials -> Install a Certificate
+- Selected cert from file system
+- In Firefox, enter about:config in URL bar
+- search for security.enterprise_roots.enabled and set to true
+It will be the same for 0.3.0 except they can also get the cert in the final step of setup or from the downloaded file from setup
diff --git a/site/source/support/user-manual/tuning/diy.rst b/site/source/support/user-manual/tuning/diy.rst
index f6e6ce9..7641d4d 100644
--- a/site/source/support/user-manual/tuning/diy.rst
+++ b/site/source/support/user-manual/tuning/diy.rst
@@ -41,7 +41,11 @@ Hardware: Components
 #. `GPIO mini speaker/buzzer <https://www.amazon.com/Corporate-Computer-Motherboard-Internal-Speaker/dp/B01527H4W2/>`_ (These often sell out, please let us know if this link needs to be refreshed)
 #. Ethernet cable
 #. MicroSD → USB adapter (or you may have a microSD port on your computer)
-#. An external drive (1TB minimum, 2TB SSD recommended), or an `internal drive <https://www.amazon.com/Crucial-MX500-NAND-SATA-Internal/dp/B078211KBB>`_ with an `USB enclosure <https://www.amazon.com/gp/product/B07T9D8F6C>`_, as sold with our upgrade kits. MUST CONNECT OVER USB 3.0
+#. An external drive (1TB minimum, 2TB SSD recommended), or an `internal drive <https://www.amazon.com/Crucial-MX500-NAND-SATA-Internal/dp/B078211KBB>`_ with an `USB enclosure <https://www.amazon.com/gp/product/B07T9D8F6C>`_, as sold with our upgrade kits. MUST CONNECT OVER USB 3.0!
+
+    - Currently the only tested and supported external drives are the Samsung T5 and T7
+
+  .. tip:: Alternatively, you may build with the Geekworm setup and internal M.2 drive as described in this `guide <https://start9dave.substack.com/p/diy-build>`_, which has been tested to work, but is not currently supported.
 
 Hardware: Assembly
 ..................