diff --git a/Security-Configuration.md b/Security-Configuration.md
index 77d1c05..b81d784 100644
--- a/Security-Configuration.md
+++ b/Security-Configuration.md
@@ -97,3 +97,14 @@ key  = "/Users/chris/.seaweedfs/out/client01.key"
 
 
 ```
+
+### For Java gRPC
+Java gRPC uses Netty's SslContext. From https://netty.io/wiki/sslcontextbuilder-and-private-key.html
+
+> The SslContextBuilder and so Netty's SslContext implementations only support PKCS8 keys.
+>
+> If you have a key with another format you need to convert it to PKCS8 first to be able to use it. This can be done easily by using openssl.
+>
+> For example to convert a non-encrypted PKCS1 key to PKCS8 you would use:
+>
+> openssl pkcs8 -topk8 -nocrypt -in pkcs1_key_file -out pkcs8_key.pem