> ## Documentation index
> Fetch the complete documentation index at: https://arize.com/llms.txt
> Ask it with GET https://arize.com/ask?q=<keywords or question>. Short keywords rank best.
> Use these to discover all available pages before exploring further.

# 04.28.2025: TLS support for Phoenix server

> Available in Phoenix 8.29+

<Update label="04.28.2025">

## TLS Support For Phoenix Server

Phoenix now supports Transport Layer Security (TLS) for both HTTP and gRPC connections, enabling encrypted communication and optional mutual TLS (mTLS) authentication. This enhancement provides a more secure foundation for production deployments.

### **Highlights:**

* **Secure HTTP & gRPC Connections:** Phoenix can now serve over HTTPS and secure gRPC.
* **Flexible TLS Configuration:** TLS settings are managed via environment variables.
* **Optional Client Verification:** Support for mTLS with configurable client certificate validation.
* **Improved Testing:** TLS-aware infrastructure added to integration tests.
* **Better Visibility:** Server startup logs now display TLS status.

### **Configuration Options**

Set the following environment variables to enable and customize TLS:

| Variable                        | Type    | Description                                      |
| ------------------------------- | ------- | ------------------------------------------------ |
| `PHOENIX_TLS_ENABLED`           | boolean | Enable or disable TLS (`true`/`false`)           |
| `PHOENIX_TLS_CERT_FILE`         | string  | Path to TLS certificate file                     |
| `PHOENIX_TLS_KEY_FILE`          | string  | Path to private key file                         |
| `PHOENIX_TLS_KEY_FILE_PASSWORD` | string  | Password for encrypted private key file          |
| `PHOENIX_TLS_CA_FILE`           | string  | Path to CA certificate (for client verification) |
| `PHOENIX_TLS_VERIFY_CLIENT`     | boolean | Enable client cert verification                  |

<Info>
    **Note:** Encrypted private keys require the `cryptography` Python package for decryption.
</Info>

</Update>
