diff --git a/apps/routerconsole/jsp/configfamily.jsp b/apps/routerconsole/jsp/configfamily.jsp
index 1646e8617..7a4ddb03d 100644
--- a/apps/routerconsole/jsp/configfamily.jsp
+++ b/apps/routerconsole/jsp/configfamily.jsp
@@ -44,7 +44,8 @@
 <form action="" method="POST" enctype="multipart/form-data" accept-charset="UTF-8">
 <input type="hidden" name="nonce" value="<%=pageNonce%>" >
 <h3><%=intl._t("Join Router Family")%></h3>
-<p><%=intl._t("Select private key file")%> :
+<p><%=intl._t("Import the secret family key that you exported from an existing router in the family.")%>
+<p><%=intl._t("Select secret key file")%> :
 <input name="file" type="file" value="" />
 </p>
 <div class="formaction">
@@ -60,7 +61,7 @@
 <div class="configure">
 <form action="/exportfamily" method="GET">
 <h3><%=intl._t("Export Family Key")%></h3>
-<p><%=intl._t("Create a family key certificate to be imported into other routers you control.")%>
+<p><%=intl._t("Export the secret family key to be imported into other routers you control.")%>
 </p>
 <div class="formaction">
 <input type="submit" name="action" class="go" value="<%=intl._t("Export Family Key")%>" />
diff --git a/apps/routerconsole/jsp/exportfamily.jsp b/apps/routerconsole/jsp/exportfamily.jsp
index e271b600b..00ce9dc55 100644
--- a/apps/routerconsole/jsp/exportfamily.jsp
+++ b/apps/routerconsole/jsp/exportfamily.jsp
@@ -12,7 +12,7 @@ try {
         response.setDateHeader("Expires", 0);
         response.addHeader("Cache-Control", "no-store, max-age=0, no-cache, must-revalidate");
         response.addHeader("Pragma", "no-cache");
-        String name = "family-" + family + ".crt";
+        String name = "family-" + family + "-secret.crt";
         response.setContentType("application/x-x509-ca-cert; name=\"" + name + '"');
         response.addHeader("Content-Disposition", "attachment; filename=\"" + name + '"');
         java.io.File ks = new java.io.File(ctx.getConfigDir(), "keystore");