--- doc/build/ubuntu16LTS_install.frag	2018/06/20 12:36:29	1.4
+++ doc/build/ubuntu16LTS_install.frag	2021/01/09 03:26:20	1.5
@@ -56,7 +56,7 @@ DHCP is <em>not</em> supported.
 
 <h2>3. <a name="lin">Ubuntu 16.04 LTS installation</a></h2>
 <p>
-Installing Ubuntu Linux is easy.
+Installing Ubuntu Linux is straightforward.
 Documentation is available from
 <a href="https://help.ubuntu.com/community/Installation">https://help.ubuntu.com/community/Installation/</a>
 Most of the installation screens are self explanatory.
@@ -126,13 +126,6 @@ sudo apt-get upgrade
 <p>
 If kernel packages were updated, reboot your system before continuing with the installation.
 </p>
-<p>
-Add LON-CAPA ubuntu repository to your /etc/apt/sources.list file. 
-</p>
-<pre>
-sudo apt-get install python-software-properties
-sudo apt-add-repository 'deb http://install.loncapa.org/ubuntu xenial main'
-</pre>
 <h2>5. <a name="ilc">Installing LON-CAPA</a></h2>
 <h3>Import the LON-CAPA encryption key</h3>
 <pre>
@@ -140,6 +133,18 @@ wget http://install.loncapa.org/versions
 sudo apt-key add APT-GPG-KEY-loncapa.asc
 sudo apt-get update
 </pre>
+<h3>Add LON-CAPA ubuntu repository to /etc/apt/sources.list</h3>
+<p> Execute: </p>
+<pre>
+sudo apt-get install python-software-properties
+sudo apt-add-repository 'deb http://install.loncapa.org/ubuntu xenial main'
+</pre>
+<p>
+You can display which repositories are currently enabled by using:
+</p>
+<pre>
+sudo apt-cache policy
+</pre>
 <h3>Install prerequisites</h3>
 <p> Execute: </p>
 <pre>
@@ -147,6 +152,19 @@ sudo apt-get install loncapa-prerequisit
 </pre><p>
 This may take some minutes due to LON-CAPA's large number of dependencies.
 </p>
+<h3>Secure MySQL</h3>
+<p> Execute: </p>
+<pre>
+sudo mysql_secure_installation
+</pre><p>
+Press ENTER to skip set up of the validate password plugin.<br />
+Although you will be prompted to set a password for the MySQL root user, in Ubuntu systems running MySQL 5.7 (and later),
+the root user is authenticated by the auth_socket plugin by default, so 
+
+Answer “Y” (yes) to the prompts to: (a) remove the anonymous user, (b) restrict root user access to the local machine,
+and (c) remove the test database.</p>
+<p>
+In Ubuntu systems running MySQL 5.7 (and later), the root user is authenticated by the auth_socket plugin by default. 
 <h3>Set MPM mode for Apache web server and enable use of cgi scripts and webDAV</h3>
 <p>Execute: </p>
 <pre>