diff --git a/kms/README.md b/kms/README.md
index 7fa27dd8a..19130c92e 100644
--- a/kms/README.md
+++ b/kms/README.md
@@ -150,7 +150,7 @@ The verification process follows these steps:
 
 ## The RPC Interface
 
-The KMS RPC interface is defined in [kms.proto](rpc/proto/kms.proto).
+The KMS RPC interface is defined in [kms_rpc.proto](rpc/proto/kms_rpc.proto).
 
 The core interface serving the dstack app are:
 - `GetAppKey`: Requests an app key using the app ID and TDX quote
@@ -171,7 +171,7 @@ The `GetAppKey` RPC is used by the dstack app to request an app key. In this RPC
 
 
 Note:
-There are multiple keys derived for different usage, see [kms.proto](rpc/proto/kms.proto) for more details.
+There are multiple keys derived for different usage, see [kms_rpc.proto](rpc/proto/kms_rpc.proto) for more details.
 The root key is generated by a genesis KMS node in TEE and would be stored in the KMS node's encrypted local disk, replicated to other KMS nodes.
 The keys are derived with app id which guarantees apps can not get the keys from other apps.