diff --git a/xds/src/main/java/io/grpc/xds/sds/ClientSslContextProviderFactory.java b/xds/src/main/java/io/grpc/xds/sds/ClientSslContextProviderFactory.java
index 4492d5cb7c..dfb5ba63f0 100644
--- a/xds/src/main/java/io/grpc/xds/sds/ClientSslContextProviderFactory.java
+++ b/xds/src/main/java/io/grpc/xds/sds/ClientSslContextProviderFactory.java
@@ -19,6 +19,7 @@ package io.grpc.xds.sds;
 import static com.google.common.base.Preconditions.checkArgument;
 import static com.google.common.base.Preconditions.checkNotNull;
 
+import com.google.common.util.concurrent.ThreadFactoryBuilder;
 import io.envoyproxy.envoy.api.v2.auth.UpstreamTlsContext;
 import io.grpc.xds.Bootstrapper;
 import io.grpc.xds.sds.ReferenceCountingSslContextProviderMap.SslContextProviderFactory;
@@ -45,7 +46,10 @@ final class ClientSslContextProviderFactory
         return SdsSslContextProvider.getProviderForClient(
             upstreamTlsContext,
             Bootstrapper.getInstance().readBootstrap().getNode(),
-            Executors.newSingleThreadExecutor(),
+            Executors.newSingleThreadExecutor(new ThreadFactoryBuilder()
+                .setNameFormat("client-sds-sslcontext-provider-%d")
+                .setDaemon(true)
+                .build()),
             /* channelExecutor= */ null);
       } catch (IOException ioe) {
         throw new RuntimeException(ioe);
diff --git a/xds/src/main/java/io/grpc/xds/sds/ServerSslContextProviderFactory.java b/xds/src/main/java/io/grpc/xds/sds/ServerSslContextProviderFactory.java
index a36d0d1f25..e5d69c74bc 100644
--- a/xds/src/main/java/io/grpc/xds/sds/ServerSslContextProviderFactory.java
+++ b/xds/src/main/java/io/grpc/xds/sds/ServerSslContextProviderFactory.java
@@ -19,6 +19,7 @@ package io.grpc.xds.sds;
 import static com.google.common.base.Preconditions.checkArgument;
 import static com.google.common.base.Preconditions.checkNotNull;
 
+import com.google.common.util.concurrent.ThreadFactoryBuilder;
 import io.envoyproxy.envoy.api.v2.auth.DownstreamTlsContext;
 import io.grpc.xds.Bootstrapper;
 import io.grpc.xds.sds.ReferenceCountingSslContextProviderMap.SslContextProviderFactory;
@@ -46,7 +47,10 @@ final class ServerSslContextProviderFactory
         return SdsSslContextProvider.getProviderForServer(
             downstreamTlsContext,
             Bootstrapper.getInstance().readBootstrap().getNode(),
-            Executors.newSingleThreadExecutor(),
+            Executors.newSingleThreadExecutor(new ThreadFactoryBuilder()
+                .setNameFormat("server-sds-sslcontext-provider-%d")
+                .setDaemon(true)
+                .build()),
             /* channelExecutor= */ null);
       } catch (IOException ioe) {
         throw new RuntimeException(ioe);