diff --git a/_addons_bindings/xmppclient/readme.md b/_addons_bindings/xmppclient/readme.md
index 8a3ca8276..9e5131db0 100644
--- a/_addons_bindings/xmppclient/readme.md
+++ b/_addons_bindings/xmppclient/readme.md
@@ -40,22 +40,23 @@ Bridge xmppclient:xmppBridge:xmpp "XMPP Client" [ host="xmpp.example.com", port=
 
 **xmppBridge** parameters:
 
-| Name     | Label              | Description                               |  Required | Default value         |
-|----------|--------------------|-------------------------------------------|-----------|-----------------------|
-| username | Username           | The XMPP username (left part of JID)      | true      | -                     |
-| domain   | Domain             | The XMPP domain name (right part of JID)  | true      | -                     |
-| password | Password           | The XMPP user password                    | true      | -                     |
-| host     | Server Hostname/IP | The IP/Hostname of the XMPP server        | false     | as "domain" parameter |
-| port     | XMPP server Port   | The typical port is 5222                  | false     | 5222                  |
+| Name         | Label              | Description                                                        | Required | Default value         |
+|--------------|--------------------|--------------------------------------------------------------------|----------|-----------------------|
+| username     | Username           | The XMPP username (left part of JID)                               | true     | -                     |
+| domain       | Domain             | The XMPP domain name (right part of JID)                           | true     | -                     |
+| password     | Password           | The XMPP user password                                             | true     | -                     |
+| host         | Server Hostname/IP | The IP/Hostname of the XMPP server                                 | false    | as "domain" parameter |
+| port         | XMPP server Port   | The typical port is 5222                                           | false    | 5222                  |
+| securityMode | Security Mode      | Sets the TLS security mode: `required`, `ifpossible` or `disabled` | false    | `required`            |
 
 ## Channels
 
 **publishTrigger** parameters:
 
-| Name      |      Label          |  Description                                                                                                                                                                                                                                       |  Required |
-|-----------|---------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------|
-| payload   | Payload condition   | An optional condition on the value                                                                                                                                                                                                                 | false     |
-| separator | Separator character | The trigger channel payload usually only contains the received text. If you define a separator character, for example '#', the sender UID and received text will be in the trigger channel payload. For example: pavel@example.com#My Message Text | false     |
+| Name      | Label               | Description                                                                                                                                                                                                                                        | Required |
+|-----------|---------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------|
+| payload   | Payload condition   | An optional condition on the value                                                                                                                                                                                                                 | false    |
+| separator | Separator character | The trigger channel payload usually only contains the received text. If you define a separator character, for example '#', the sender UID and received text will be in the trigger channel payload. For example: pavel@example.com#My Message Text | false    |
 
 ## Example Rules
 
diff --git a/_thing_types/org.openhab.binding.xmppclient/src/main/resources/OH-INF/thing/thing-types.xml b/_thing_types/org.openhab.binding.xmppclient/src/main/resources/OH-INF/thing/thing-types.xml
index b9841ddce..ea506032b 100644
--- a/_thing_types/org.openhab.binding.xmppclient/src/main/resources/OH-INF/thing/thing-types.xml
+++ b/_thing_types/org.openhab.binding.xmppclient/src/main/resources/OH-INF/thing/thing-types.xml
@@ -30,6 +30,19 @@
 			<parameter name="port" type="integer">
 				<label>XMPP Server Port</label>
 				<description>The default port is 5222.</description>
+				<advanced>true</advanced>
+			</parameter>
+			<parameter name="securityMode" type="text" required="true">
+				<label>Security Mode</label>
+				<description>An enumeration for TLS security modes that are available when making a connection to the XMPP server.</description>
+				<limitToOptions>true</limitToOptions>
+				<options>
+					<option value="required">Required</option>
+					<option value="ifpossible">Optional</option>
+					<option value="disabled">Disabled</option>
+				</options>
+				<default>required</default>
+				<advanced>true</advanced>
 			</parameter>
 		</config-description>
 	</bridge-type>