diff --git a/man/Makefile.am b/man/Makefile.am
index a74a901b8..ea04303bd 100644
--- a/man/Makefile.am
+++ b/man/Makefile.am
@@ -7,5 +7,7 @@ SUFFIXES = .in
 .in:
 	sed \
 	-e "s:@IPSEC_VERSION@:$(PACKAGE_VERSION):" \
+	-e "s:@DEV_URANDOM@:$(urandom_device):" \
+	-e "s:@DEV_RANDOM@:$(random_device):" \
 	$(srcdir)/$@.in > $@
 
diff --git a/man/strongswan.conf.5.in b/man/strongswan.conf.5.in
index 3aba09dd9..e690b7792 100644
--- a/man/strongswan.conf.5.in
+++ b/man/strongswan.conf.5.in
@@ -643,6 +643,12 @@ keys not stored on tokens
 .TP
 .BR libstrongswan.plugins.pkcs11.use_rng " [no]"
 Whether the PKCS#11 modules should be used as RNG
+.TP
+.BR libstrongswan.plugins.random.random " [@DEV_RANDOM@]"
+File to read random bytes from, instead of @DEV_RANDOM@
+.TP
+.BR libstrongswan.plugins.random.urandom " [@DEV_URANDOM@]"
+File to read pseudo random bytes from, instead of @DEV_URANDOM@
 .SS libtnccs section
 .TP
 .BR libtnccs.tnc_config " [/etc/tnc_config]"