diff --git a/ironic/conf/xclarity.py b/ironic/conf/xclarity.py
index 2bca905a7d..a14901ce9d 100644
--- a/ironic/conf/xclarity.py
+++ b/ironic/conf/xclarity.py
@@ -28,6 +28,7 @@ opts = [
                       'in the Stein release. Please update the driver_info '
                       'field to use "xclarity_username" instead')),
     cfg.StrOpt('password',
+               secret=True,
                help=_('Password for XClarity Controller username. '
                       'Configuration here is deprecated and will be removed '
                       'in the Stein release. Please update the driver_info '
diff --git a/releasenotes/notes/xclarity-mask-password-9fe7605ece7689c3.yaml b/releasenotes/notes/xclarity-mask-password-9fe7605ece7689c3.yaml
new file mode 100644
index 0000000000..615af27e58
--- /dev/null
+++ b/releasenotes/notes/xclarity-mask-password-9fe7605ece7689c3.yaml
@@ -0,0 +1,5 @@
+---
+security:
+  - |
+    Xclarity password specified in configuration file is now properly masked
+    during logging.