diff --git a/00-setup-machine.sh b/00-setup-machine.sh
index 20d60db..7a74633 100644
--- a/00-setup-machine.sh
+++ b/00-setup-machine.sh
@@ -22,21 +22,22 @@ fi
 if [[ "$OSTYPE" =~ ^darwin ]]; then
 
   # install az cli
-  brew update && brew install azure-cli
+  brew update && brew install azure-cli  
 
-  # Add the tap for bicep
-  brew tap azure/bicep
+  # install jq
+  brew install jq
 
-  brew help
-  if [[ $? != 0 ]] ; then
-    /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
-  else
-    brew update
-  fi
+  # install bicep cli
+
+  # Fetch the latest Bicep CLI binary
+  curl -Lo bicep https://github.com/Azure/bicep/releases/latest/download/bicep-osx-x64
+  # Mark it as executable
+  chmod +x ./bicep
+  # Add Gatekeeper exception (requires admin)
+  sudo spctl --add ./bicep
+  # Add bicep to your PATH (requires admin)
+  sudo mv ./bicep /usr/local/bin/bicep
 
-  brew install bicep
-  brew install jq
-  
 fi
 
 # check installed tooling
@@ -52,9 +53,9 @@ fi
 
 az bicep version
 if [ $? == 0 ]; then
-  echosuccess "[.] bicep support...OK";
+  echosuccess "[.] az-cli bicep support...OK";
 else
-  echo "Installing bicep"
+  echo "Enabling bicep support in az-cli"
   az bicep install
 fi
 
diff --git a/02-cbs.bicepparam.example b/02-cbs.bicepparam.example
index e65f3e5..e8a0ef8 100644
--- a/02-cbs.bicepparam.example
+++ b/02-cbs.bicepparam.example
@@ -10,6 +10,8 @@ param arrayName = 'my-array-name'
 param licenseKey = 'CBS-TRIAL-LICENSE'
 param cbsModelSku = 'V20MUR1'
 param orgDomain = 'myorgdomain.dev'
-param managedUserIdentityId = '/subscriptions/<subscriptionId>/resourceGroups/<rgName>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<uminame>'
+// replace with resource ID of the managed identity (e.g. from output of 01-deploy-prerequisities.sh)
+param managedUserIdentityId = '/subscriptions/<---MY SUBSCRITION ID--->/resourceGroups/<---RG NAME--->/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<---NAME OF USER MANAGED IDENTITY --->'
+// replace with vNET name (e.g. from output of 01-deploy-prerequisities.sh)
 param vnetName = 'my-vnet-name'
 param availabilityZone = 1
diff --git a/03-test-vm.bicepparam.example b/03-test-vm.bicepparam.example
index 13c872c..b27a4a9 100644
--- a/03-test-vm.bicepparam.example
+++ b/03-test-vm.bicepparam.example
@@ -6,6 +6,7 @@ param resourceGroupName = 'your-resource-group-name'
 
 param extensionFileUrl = 'https://raw.githubusercontent.com/PureStorage-OpenConnect/cbs-deploy-bicep/main/templates/test-vm-extensions/setup-demo-cbs.ps1'
 param extensionCustomizeUXFileUrl = 'https://raw.githubusercontent.com/PureStorage-OpenConnect/cbs-deploy-bicep/main/templates/test-vm-extensions/customize-vm.ps1'
+// replace with IP address of load balancer of CBS (e.g. from output of 02-deploy-cbs.sh)
 param PureManagementIP = '<< IP address of load balancer of CBS >>'
 
 // this is CBS default username and password