diff --git a/jetty-server/src/main/config/etc/jetty-https.xml b/jetty-server/src/main/config/etc/jetty-https.xml
index d1e41ebe54c..93c8fe1954d 100644
--- a/jetty-server/src/main/config/etc/jetty-https.xml
+++ b/jetty-server/src/main/config/etc/jetty-https.xml
@@ -17,6 +17,14 @@
   <!-- Consult the javadoc of o.e.j.util.ssl.SslContextFactory     -->
   <!-- o.e.j.server.HttpConnectionFactory for all configuration    -->
   <!-- that may be set here.                                       -->
+  <!--                                                             -->
+  <!-- The keyManagerPassword is passed as the password arg to     -->
+  <!-- KeyManagerFactory.init(...)                                 -->
+  <!-- If there is no keymanagerpassword, then the                 -->
+  <!-- keystorepassword is used instead.                           -->
+  <!-- If there is no trustmanager set, then the keystore is used  -->
+  <!-- as the trust store and the keystorepassword is used as the  -->
+  <!-- truststore password.                                        -->
   <!-- =========================================================== -->
   <New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
     <Set name="KeyStorePath"><Property name="jetty.home" default="." />/etc/keystore</Set>