Hi @RAGHUY , Thank you for the information. I have already implemented the HASHICORP_VAULT_KV Sensitive Property Provider configuration as described: Configured bootstrap-hashicorp-vault.conf Added nifi.bootstrap.protection.hashicorp.vault.conf in bootstrap.conf Stored the SSL passwords in Vault KV Used the encrypt-config toolkit (1.27) with the HASHICORP_VAULT_KV protection scheme to replace the plaintext values in nifi.properties However, NiFi is still failing to start. The bootstrap process appears to resolve the secret reference, but when the server initializes, I get the following error: ERROR [main] org.apache.nifi.web.server.JettyServer Failed to start Server org.apache.nifi.security.ssl.BuilderConfigurationException: Key Store loading failed Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect Caused by: java.security.UnrecoverableKeyException: Password verification failed This suggests that the password being used to load the keystore is either not being resolved correctly from Vault or does not match the actual keystore password. To verify the Vault secret itself, I manually retrieved the password from Vault and used it with the keystore, and it appears to be correct. Have you encountered this issue before with the HASHICORP_VAULT_KV protection scheme? Is there a recommended way to verify what value NiFi is resolving from Vault during bootstrap, or any known issues related to keystore/truststore password resolution in NiFi 2.8.0? Thank you. ... View more