diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 07776b0faf..be65160136 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -156,7 +156,7 @@
 	  <command>dnssec-keymgr</command>, has been added. This tool
 	  is meant to run unattended (e.g., under <command>cron</command>).
 	  It reads a policy definition file
-	  (default: <filename>/etc/dnssec.policy</command>)
+	  (default: <filename>/etc/dnssec.policy</filename>)
 	  and creates or updates DNSSEC keys as necessary to ensure that a
 	  zone's keys match the defined policy for that zone.  New keys are
 	  created whenever necessary to ensure rollovers occur correctly.