diff --git a/kdc/kdc.8 b/kdc/kdc.8
index f76d4d4c9..bbf00dbd6 100644
--- a/kdc/kdc.8
+++ b/kdc/kdc.8
@@ -60,7 +60,7 @@
 .Xc
 .Oc
 .Op Fl -detach
-.Op Fl -disable-DES
+.Op Fl -disable-des
 .Op Fl -addresses= Ns Ar list of addresses
 .Ek
 .Sh DESCRIPTION
@@ -152,7 +152,7 @@ If only a subset is desired, or the automatic detection fails, this
 option might be used.
 .It Fl -detach
 detach from pty and run as a daemon.
-.It Fl -disable-DES
+.It Fl -disable-des
 disable add des encryption types, makes the kdc not use them.
 .El
 .Pp