Download the latest
.jks
truststore file from the secured Kafka broker associated with a secured schema registry.
Extract the certificate from the
.jks
truststore file in PEM format.
The certificate is exported in
.cer
format.
When prompted, specify the password for the truststore file.
Import the
.cer
certificate into the cacerts file in the following location:
<Secure agent installation directory>\jdk\jre\lib\security
When prompted, specify the password for the
cacerts
file.
If there is a jdk folder within the
<Secure agent installation directory>\apps
folder, navigate to the following folder and import the
.cer
certificate into the
cacerts
file:
<Secure agent installation directory>\apps\jdk\<latest Zulu version>\jre\lib\security
After you import the
cacerts
file, verify the entry of the
.cer
certificate.
Restart the Secure Agent.

Configure the Kafka connection to enable one-way SSL authentication with the Confluent schema registry:

In
Administrator
, select
Connections
.
Select a Kafka connection for which you want to configure one-way SSL authentication with the Confluent schema registry.
Click
Edit
.
In the Kafka connection properties, select the
SSL Mode
as
One-way
.
Specify the
SSL TrustStore File Path
and the
SSL TrustStore Password
.
Click
Save
to save the connection.

Configure the JVM Options and INFA_DEBUG property for the Secure Agent to configure one-way SSL authentication with the Confluent schema registry and to successfully import the Avro metadata from the Confluent schema registry.

To configure the Secure Agent and successfully import the Avro metadata, perform the following steps:

In
Administrator
, select
Runtime Environments
.
Select the Secure Agent for which you want to configure from the list of available Secure Agents.
In the upper-right corner, click
Edit
.
In the
System Configuration Details
section, select the
Type
as
DTM
for the Data Integration Service.
Edit the following JVM options and add the following values:
Property	Value
JVMOption3	-Dsr.sslTruststoreFilePath=<schema registry truststore certificate file path>/schema_registry.truststore.jks
JVMOption4	-Dsr.sslTruststorePassword=<password for the schema registry truststore certificate>
Select the
Type
as
Platform
for the Data Integration Service.
Edit the INFA_DEBUG property and add the following space separated values:
-Dsr.sslTruststoreFilePath=<schema registry truststore certificate file path>/schema_registry.truststore.jks -Dsr.sslTruststorePassword=<password for the schema registry truststore certificate>
Click
Save
.
Restart the Secure Agent.