diff --git a/doc/Changelog b/doc/Changelog
index 6f1b4c3a2..a3a93926b 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+3 May 2021: Wouter
+	- Fix #481: Fix comment in configuration file.
+
 29 April 2021: Wouter
 	- Add that log-servfail prints an IP address and more information
 	  about one of the last failures for that query.
diff --git a/doc/example.conf.in b/doc/example.conf.in
index 2149b2258..0a250bc79 100644
--- a/doc/example.conf.in
+++ b/doc/example.conf.in
@@ -508,6 +508,7 @@ server:
 	#
 	# If you want to perform DNSSEC validation, run unbound-anchor before
 	# you start unbound (i.e. in the system boot scripts).
+	# And then enable the auto-trust-anchor-file config item.
 	# Please note usage of unbound-anchor root anchor is at your own risk
 	# and under the terms of our LICENSE (see that file in the source).
 	# auto-trust-anchor-file: "@UNBOUND_ROOTKEY_FILE@"