# Manual Construction of Serializer/Deserializer considerations
**URL:** https://forum.confluent.io/t/manual-construction-of-serializer-deserializer-considerations/717
**Category:** Schema Registry
**Created:** [5 February 2021 19:14 UTC](https://forum.confluent.io/t/manual-construction-of-serializer-deserializer-considerations/717 "2021-02-05T19:14:25Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@nbuesing](https://forum.confluent.io/u/nbuesing)
#### Post date: [5 February 2021 19:14 UTC](https://forum.confluent.io/t/manual-construction-of-serializer-deserializer-considerations/717/1 "2021-02-05T19:14:25Z")
If you manually construct a Confluent Serializer/Deserilizer/Serde that leverages Schema Registry, when you create one, don’t do this:
```
HashMap map = new HashMap<>();
map.put(KafkaAvroDeserializerConfig.SPECIFIC_AVRO_READER_CONFIG, "true");
map.put(AbstractKafkaSchemaSerDeConfig.SCHEMA_REGISTRY_URL_CONFIG, properties.getSchemaRegistryUrl());
Serde serde = new SpecificAvroSerde<>();
serde.configure(map, false);
```
This works fine for your local non-secured local (docker) environment. However, let’s say you promote this code to a higher level environment that uses basic authentication to lock down the schema registry. It won’t work, even if you added your authentication properties correctly to your Kafka client properties.
The following properties must be provided to the serializer and deserializer:
```
basic.auth.credentials.source=USER_INFO
basic.auth.user.info=user:password
schema.registry.ssl.truststore.location="/secrets/truststore.jks"
schema.registry.ssl.truststore.password=myAwesomePassword
```
So do this instead, and if you have to create a serde that is different than the settings in your typical client configuration, override that one setting, as in:
```
Map map =new HashMap<>(kafkaConfig.properties());
map.put(KafkaAvroDeserializerConfig.SPECIFIC_AVRO_READER_CONFIG, "true");
Serde serde = new SpecificAvroSerde<>();
serde.configure(map, false);
```
---
### Author:  [@gklijs](https://forum.confluent.io/u/gklijs)
#### Post date: [7 February 2021 09:08 UTC](https://forum.confluent.io/t/manual-construction-of-serializer-deserializer-considerations/717/2 "2021-02-07T09:08:00Z")
Where is the schema registry url coming from in the second example? But true, they might need some additional config form the client config.
Also specific only works with the correct classes on the classpath, first thought it was about that.
---
### Author:  [@nbuesing](https://forum.confluent.io/u/nbuesing)
#### Post date: [9 February 2021 14:34 UTC](https://forum.confluent.io/t/manual-construction-of-serializer-deserializer-considerations/717/3 "2021-02-09T14:34:15Z")
In my example, the schema registry URL is part of the kafkaConfig.properties(). Kafka Clients will ignore the extra parameter (but does log them). Yes, specific Avro requires POJOs for each of the objects being serialized/deserialized.