diff --git a/servers/slapd/slapd.conf b/servers/slapd/slapd.conf
index 91dab7bdb00c3d1f7460af44b22eeacfcde0e11d..0c39145cde5972b5cafd1fe619a67be8c5add6fe 100644
--- a/servers/slapd/slapd.conf
+++ b/servers/slapd/slapd.conf
@@ -28,8 +28,9 @@ argsfile	%LOCALSTATEDIR%/slapd.args
 # disallow bind_simple_unprotected
 #
 #	Require integrity protection (prevent hijacking)
-#	Require 112-bit (3DES or better) encryption
-# security ssf=1 ssf=112
+#	Require 112-bit (3DES or better) encryption for updates
+#	Require 63-bit encryption for simple bind
+# security ssf=1 update_ssf=112 simple_bind=64
 
 # Sample access control policy:
 #	Allow read access of root DSE