Thank you @Sonu Sahi for the response. I checked your colleague's blog. He is using password file but not the password alias (credential provider) which is saving password in keystore instead of file. Any way I finally figure out how to make it work. In case some one else need this in the future, I paste my solution here: The option file: import -connect "jdbc:sqlserver://host:1433;database=DB1" Script for Sqoop job defination: sqoop job -Dhadoop.security.credential.provider.path=jceks://hdfs/user/root/mysql.password.jceks --create sqoop_test -- options-file db.props --username sqoop_ro --password-alias sqoop_ro.passwd --target-dir /XXX --query 'select ....' This works for me. Thanks ... View more