diff --git a/docs/INSTALLER.md b/docs/INSTALLER.md
index d6ba00c..ca82864 100644
--- a/docs/INSTALLER.md
+++ b/docs/INSTALLER.md
@@ -22,6 +22,10 @@ boot proof to go wrong.
 No branch ever returns to start. Cancel/skip always moves forward. The only
 exits are Done, explicit close, or a payload write failure.
 
+Buttons: X = enter, O = back. The confirm dialog uses `YESNO` focused on
+Yes — the OpenOrbis default `YESNO_FOCUS_NO` puts the console's confirm
+button on No, which inverts the whole wizard.
+
 ## Console facts encoded
 
 - Splash must hide before dialogs (`sceSystemServiceHideSplashScreen`) +
diff --git a/installer/ui.c b/installer/ui.c
index b9d5e9c..6049e45 100644
--- a/installer/ui.c
+++ b/installer/ui.c
@@ -88,7 +88,9 @@ int ui_confirm(const char *msg){
     base_init(&param);
     memset(&um, 0, sizeof um);
     um.msg = msg;
-    um.buttonType = ORBIS_MSG_DIALOG_BUTTON_TYPE_YESNO_FOCUS_NO;
+    /* X = enter (Yes focused), O = back/decline. The default FOCUS_NO
+     * variant puts the confirm button on No, which inverts the wizard. */
+    um.buttonType = ORBIS_MSG_DIALOG_BUTTON_TYPE_YESNO;
     param.userMsgParam = &um;
     if(sceMsgDialogOpen(&param) < 0){ sceMsgDialogTerminate(); return -1; }
     do { } while(sceMsgDialogUpdateStatus() != ORBIS_COMMON_DIALOG_STATUS_FINISHED);