When you enable Kerberos on an Ambari-managed cluster, Ambari configures Kerberos for Zeppelin and automatically creates a Kerberos account and keytab for it. For more information, seeConfiguring Ambari and Hadoop for Kerberos.

If your cluster is not managed with Ambari and you plan to enable Kerberos for the Zeppelin server, seeCreating Service Principals and Keytab Files for HDP in the Hadoop Security Guide.