diff --git a/weblogic-azure-aks/src/main/arm/createUiDefinition.json b/weblogic-azure-aks/src/main/arm/createUiDefinition.json
index 61c9d8279..00340d00a 100644
--- a/weblogic-azure-aks/src/main/arm/createUiDefinition.json
+++ b/weblogic-azure-aks/src/main/arm/createUiDefinition.json
@@ -4,6 +4,18 @@
     "version": "0.1.2-preview",
     "parameters": {
         "basics": [
+            {
+                "name": "domainHomeSourceTypeExplainer",
+                "type": "Microsoft.Common.TextBlock",
+                "visible": true,
+                "options": {
+                    "text": "This offer always deploys WebLogic Server using the 'Model in image' domain home source type, even when the persistent volume checkbox is checked in 'Configure AKS cluster' blade.  For more information on domain home source types, follow the link below",
+                    "link": {
+                        "label": "Learn more",
+                        "uri": "https://aka.ms/wls-aks-docs-domain-home-source-type"
+                    }
+                }
+            },
             {
                 "name": "basicsRequired",
                 "type": "Microsoft.Common.Section",
@@ -52,10 +64,10 @@
                         "name": "wdtRuntimePassword",
                         "type": "Microsoft.Common.PasswordBox",
                         "label": {
-                            "password": "Password for WebLogic Deploy Tooling runtime encrytion",
+                            "password": "Password for WebLogic Model encryption",
                             "confirmPassword": "Confirm password"
                         },
-                        "toolTip": "The model WebLogic Deploy Tooling runtime encrytion secret.",
+                        "toolTip": "Model in Image requires a runtime encryption secret with a secure `password` key. This secret is used by the operator to encrypt model and domain home artifacts before it adds them to a runtime ConfigMap or log. See https://aka.ms/wls-aks-model-runtime-encryption-secret.",
                         "constraints": {
                             "required": true,
                             "regex": "^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d)[A-Za-z\\d]{12,}$",
@@ -280,18 +292,6 @@
                 },
                 "bladeTitle": "Configure AKS cluster",
                 "elements": [
-                    {
-                        "name": "domainHomeSourceTypeExplainer",
-                        "type": "Microsoft.Common.TextBlock",
-                        "visible": true,
-                        "options": {
-                            "text": "This offer always deploys WebLogic using the 'Model in image' domain home source type, even when the persistent volume checkbox is checked.  For more information on domain home source types, follow the link below",
-                            "link": {
-                                "label": "Learn more",
-                                "uri": "https://aka.ms/wls-aks-docs-domain-home-source-type"
-                            }
-                        }
-                    },
                     {
                         "name": "clusterInfo",
                         "type": "Microsoft.Common.Section",