---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Kafka SSL credentials fields

# Kafka SSL credentials fields {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Description of the fields on the Kafka SSL credentials form.
{#hla-data-input-kafka-credentials__table_ynx_qtz_htb__entry__2}

| Field | Description |
|-|-|
| SSL keystore | The content of an actual server.keystore.jks file, encoded as a Base64 string. This field is mandatory. |
| SSL keystore type | Format of the SSL keystore file. Default: Java KeyStore (JKS). |
| SSL keystore password | Password to the keystore, identical to the value of the ssl.keystore.password property in Apache Kafka. This field is mandatory. |
| SSL key password | Password, identical to the ssl.key.password property value in Apache Kafka. This field is mandatory. |
|   |   |
| SSL truststore | The content of an actual client.truststore.jks file, encoded as a Base64 string. This field is mandatory. |
| SSL truststore type | Format of the truststore file. Default: Java KeyStore (JKS). |
| SSL truststore password | Password to the truststore, identical to the value of the ssl.truststore.password property in Apache Kafka. This field is mandatory. |
| SSL provider | Name of the security provider used for SSL connections. |
| Disable hostname verification | Option to disable verification of the hostname. |
| Additional Kafka consumer properties | Semicolon-separated string of additional Kafka consumer properties. For example: ssl.protocol=TLSv1.2;ssl.enabled.protocols=TLSv1.2,TLSv1.1 |
[Table 1. SSL security protocol]

{#hla-data-input-kafka-credentials__table_ynx_qtz_htb} {#hla-data-input-kafka-credentials__table_frn_5tz_htb__entry__2}

| Field | Description |
|-|-|
| SSL truststore | The content of an actual client.truststore.jks file, encoded as a Base64 string. This field is mandatory. |
| SSL truststore type | Format of the SSL truststore file. Default: Java KeyStore (JKS). |
| SSL truststore password | Password to the truststore, identical to the value of the ssl.truststore.password property in Apache Kafka. This field is mandatory. |
| SSL provider | Name of the security provider used for SSL connections. |
| Disable hostname verification | Option to disable verification of the hostname. |
| User name | The user name, if any, associated with this credential. This field is mandatory. Note: The specified user name is used for SASL authentication using JAAS. The following JAAS configuration is passed to the Kafka Server: `org.apache.kafka.common.security.plain.PlainLoginModule required username=<user_name> password=<password>` |
| Password | The password associated with this credential. This field is mandatory. Note: * The specified password is used for SASL authentication using JAAS. The following JAAS configuration is passed to the Kafka Server: `org.apache.kafka.common.security.plain.PlainLoginModule required username=<user_name> password=<password>` * The password you specify is invisible. It is stored in the database in encrypted form. {#hla-data-input-kafka-credentials__ul_pxh_dw4_3tb} |
| SASL Mechanism | The SASL authentication mechanism to be used by the Kafka client. The options are: * PLAIN (default) * SCRAM-SHA-256 * SCRAM-SHA-512 * OAUTHBEARER {#hla-data-input-kafka-credentials__ul_azq_vc2_ykc}This field is mandatory. |
| SASL JAAS config template | The JAAS configuration to be used by the Kafka client, with the placeholders $\[username\] for the username, and $\[password\] for the password. This field is mandatory. |
| Additional Kafka consumer properties | Semicolon-separated string of additional Kafka consumer properties. For example: ssl.protocol=TLSv1.2;ssl.enabled.protocols=TLSv1.2,TLSv1.1 |
[Table 2. SASL_SSL security protocol]

{#hla-data-input-kafka-credentials__table_frn_5tz_htb} {#hla-data-input-kafka-credentials__table_yjt_wtz_htb__entry__2}

| Field | Description |
|-|-|
| User name | The user name, if any, associated with this credential. This field is mandatory. Note: The specified user name is used for SASL authentication using JAAS. The following JAAS configuration is passed to the Kafka Server: `org.apache.kafka.common.security.plain.PlainLoginModule required username=<user_name> password=<password>` |
| Password | The password associated with this credential. This field is mandatory. Note: * The specified password is used for SASL authentication using JAAS. The following JAAS configuration is passed to the Kafka Server: `org.apache.kafka.common.security.plain.PlainLoginModule required username=<user_name> password=<password>` * The password you specify is invisible. It is stored in the database in encrypted form. {#hla-data-input-kafka-credentials__ul_hpk_4w4_3tb} |
| Additional Kafka consumer properties | Semicolon-separated string of additional Kafka consumer properties. For example: ssl.protocol=TLSv1.2;ssl.enabled.protocols=TLSv1.2,TLSv1.1 |
[Table 3. SASL_PLAINTEXT security protocol]

{#hla-data-input-kafka-credentials__table_yjt_wtz_htb}