diff --git a/poetry.lock b/poetry.lock
index ab9084d..0f9a4d8 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -637,14 +637,14 @@ python-versions = "*"
 
 [[package]]
 name = "zipp"
-version = "3.11.0"
+version = "3.12.0"
 description = "Backport of pathlib-compatible object wrapper for zip files"
 category = "main"
 optional = false
 python-versions = ">=3.7"
 
 [package.extras]
-docs = ["furo", "jaraco.packaging (>=9)", "jaraco.tidelift (>=1.4)", "rst.linker (>=1.9)", "sphinx (>=3.5)"]
+docs = ["furo", "jaraco.packaging (>=9)", "jaraco.tidelift (>=1.4)", "rst.linker (>=1.9)", "sphinx (>=3.5)", "sphinx-lint"]
 testing = ["flake8 (<5)", "func-timeout", "jaraco.functools", "jaraco.itertools", "more-itertools", "pytest (>=6)", "pytest-black (>=0.3.7)", "pytest-checkdocs (>=2.4)", "pytest-cov", "pytest-enabler (>=1.3)", "pytest-flake8", "pytest-mypy (>=0.9.1)"]
 
 [metadata]
@@ -1071,6 +1071,6 @@ wcwidth = [
     {file = "wcwidth-0.2.6.tar.gz", hash = "sha256:a5220780a404dbe3353789870978e472cfe477761f06ee55077256e509b156d0"},
 ]
 zipp = [
-    {file = "zipp-3.11.0-py3-none-any.whl", hash = "sha256:83a28fcb75844b5c0cdaf5aa4003c2d728c77e05f5aeabe8e95e56727005fbaa"},
-    {file = "zipp-3.11.0.tar.gz", hash = "sha256:a7a22e05929290a67401440b39690ae6563279bced5f314609d9d03798f56766"},
+    {file = "zipp-3.12.0-py3-none-any.whl", hash = "sha256:9eb0a4c5feab9b08871db0d672745b53450d7f26992fd1e4653aa43345e97b86"},
+    {file = "zipp-3.12.0.tar.gz", hash = "sha256:73efd63936398aac78fd92b6f4865190119d6c91b531532e798977ea8dd402eb"},
 ]
diff --git a/site/source/_static/images/ssl/windows/0_windows_mmc.png b/site/source/_static/images/ssl/windows/0_windows_mmc.png
new file mode 100644
index 0000000..5b7c105
Binary files /dev/null and b/site/source/_static/images/ssl/windows/0_windows_mmc.png differ
diff --git a/site/source/user-manual/connecting/connecting-lan/lan-os/lan-windows.rst b/site/source/user-manual/connecting/connecting-lan/lan-os/lan-windows.rst
index 04cc63c..c4961a5 100644
--- a/site/source/user-manual/connecting/connecting-lan/lan-os/lan-windows.rst
+++ b/site/source/user-manual/connecting/connecting-lan/lan-os/lan-windows.rst
@@ -4,7 +4,7 @@
 Trusting Embassy CA On Windows
 ==============================
 
-Unfortunately, Windows does not have mDNS support built-in, which is necessary in order to visit .local addresses, so we recommend using the Bonjour service. Check out this :ref:`FAQ answer<why-bonjour>` for details.
+Unfortunately, Windows does not have mDNS alias support built-in, which is necessary in order to visit .local addresses for any service you install on your Embassy, so we recommend using the Bonjour service. Check out this :ref:`FAQ answer<why-bonjour>` for details.
 
 #. Install `Bonjour Print Services <https://support.apple.com/kb/DL999>`_ on your Windows machine.
 
@@ -16,15 +16,13 @@ Unfortunately, Windows does not have mDNS support built-in, which is necessary i
             #. Restart Windows
             #. Note: Uninstalling Bonjour via the setup package seems to be not enough to solve the issue. Bonjour must be uninstalled via windows system settings.
 
-#. Back in Windows, right-click the “Start” menu and select “Run”.
+#. Back in Windows, click the “Start” menu, type “mmc”, and select "Run as administrator"
 
-#. Type in “mmc” and click “OK”. When prompted on the “User Account Control” window, select “Yes” to allow this program to run.
-
-   .. figure:: /_static/images/ssl/windows/1_windows_mmc.png
+   .. figure:: /_static/images/ssl/windows/0_windows_mmc.png
     :width: 90%
     :alt: Windows MMC
 
-    Access the Windows Management Console
+    Access the Windows Management Console.  When prompted with the “User Account Control” window, select “Yes” to allow this program to run.
 
 #. When the Management Console opens, navigate to *File > Add/Remove Snap-in*.
 
@@ -88,4 +86,4 @@ Unfortunately, Windows does not have mDNS support built-in, which is necessary i
 
     Embassy Local Root CA imported into Certificate folder
 
-#. You can save the settings to the console if desired or cancel.
+#. You can save the settings to the console if desired, or not by pressing `Yes` or `No`.  The CA certificate will remain imported to the CA certificate store either way.