diff --git a/usr/local/www/wizards/openvpn_wizard.xml b/usr/local/www/wizards/openvpn_wizard.xml
index 00ba90454..3233e29ed 100644
--- a/usr/local/www/wizards/openvpn_wizard.xml
+++ b/usr/local/www/wizards/openvpn_wizard.xml
@@ -661,6 +661,7 @@
 			<displayname>DH Parameters Length</displayname>
 			<name>dhparameters</name>
 			<type>select</type>
+			<value>2048</value>
 			<bindstofield>ovpnserver->step10->dhkey</bindstofield>
 			<options>
 				<option>
@@ -683,13 +684,14 @@
 			<type>select</type>
 			<displayname>Encryption Algorithm</displayname>
 			<bindstofield>ovpnserver->step10->crypto</bindstofield>
+			<value>AES-256-CBC</value>
 			<options>
 				<option>
 					<name>dummy</name>
 					<value>dummy</value>
 				</option>
 			</options>
-			<description>&lt;br/&gt;The method used to encrypt traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like. Certain algorithms will perform better on different hardware, depending on the availability of supported VPN accelerator chips.</description>
+			<description>&lt;br/&gt;The algorithm used to encrypt traffic between endpoints. This setting must match on the client and server side, but is otherwise set however you like. Certain algorithms will perform better on different hardware, depending on the availability of supported VPN accelerator chips.</description>
 		</field>
 		<field>
 			<name>digest</name>