diff --git a/docker/Dockerfile b/docker/Dockerfile
index d2007c3..0f70c8c 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -127,7 +127,6 @@ RUN apt-get update && apt-get install -y \
     libsgx-dcap-default-qpl=1.21.100.3-focal1 \
     libsgx-dcap-default-qpl-dev=1.21.100.3-focal1 \
     libcurl4
-COPY docker/sgx_default_qcnl_azure.conf /etc/sgx_default_qcnl.conf
 COPY host/main /bin/svr2
 COPY enclave/releases/sgx /enclaves
 COPY host/cmd/control/control /bin/svr2control
diff --git a/docker/sample_sgx_default_qcnl_azure.conf b/docker/sample_sgx_default_qcnl_azure.conf
new file mode 100644
index 0000000..ceb07c9
--- /dev/null
+++ b/docker/sample_sgx_default_qcnl_azure.conf
@@ -0,0 +1,38 @@
+{
+  // Sample config for the DCAP quote provider library that should be provided at /etc/sgx_default_qcnl.conf. See
+  // https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/main/QuoteGeneration/qcnl/linux/sgx_default_qcnl.conf
+  // https://github.com/intel/SGXDataCenterAttestationPrimitives/blob/main/QuoteGeneration/qcnl/linux/sgx_default_qcnl_azure.conf
+
+  // PCCS server address, where to fetch PCS certificates. On azure, this should be the global
+  // azure Trusted Hardware Identity Management cache
+  "pccs_url": "https://global.acccache.azure.net/sgx/certification/v4/"
+
+  // Where to fetch PCS collateral
+  "collateral_service": "https://api.trustedservices.intel.com/sgx/certification/v4/",
+
+  "pccs_api_version": "3.1",
+
+  "retry_times": 6,
+
+  "retry_delay": 5,
+
+  // If local_pck_url is defined, the QCNL will try to retrieve PCK cert chain from local_pck_url
+  // first, and failover to pccs_url as in legacy mode. On azure this should be the local
+  // metadata Trusted Hardware Identity Management cache
+  "local_pck_url": "http://169.254.169.254/metadata/THIM/sgx/certification/v4/",
+
+  "pck_cache_expire_hours": 48,
+
+  // custom request headers and parameters to the get certificate API
+  "custom_request_options" : {
+       "get_cert" : {
+          "headers": {
+              "metadata": "true"
+          },
+          "params": {
+             "api-version": "2021-07-22-preview"
+         }
+      }
+   }
+}
+
diff --git a/docker/sgx_default_qcnl_azure.conf b/docker/sgx_default_qcnl_azure.conf
deleted file mode 100644
index e36dfa6..0000000
--- a/docker/sgx_default_qcnl_azure.conf
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "pccs_url": "https://global.acccache.azure.net/sgx/certification/v4/",
-
-  "use_secure_cert": false,
-
-  "collateral_service": "https://pccs/sgx/certification/v4/",
-
-  "pccs_api_version": "3.1",
-
-  "retry_times": 6,
-
-  "retry_delay": 5,
-
-  "local_pck_url": "http://169.254.169.254/metadata/THIM/sgx/certification/v4/",
-
-  "pck_cache_expire_hours": 48,
-
-  "custom_request_options" : {
-       "get_cert" : {
-          "headers": {
-              "metadata": "true"
-          },
-          "params": {
-             "api-version": "2021-07-22-preview"
-         }
-      }
-   }
-}
-