I would suggest checking the keystores you're using in the nifi consumer with a simple producer/consumer in the kafka host itself, for example:   Create a file called client.properties and add the SSL details, example below:   https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.0/configuring-wire-encryption/content/configuring_kafka_producer_and_kafka_consumer.html   Then run the consumer and see if the issue is replicated, if yes, you can enable debugging for the client to get more details about the exception.   I hope that helps to find the root cause. ... View more