> ## Documentation Index
> Fetch the complete documentation index at: https://arizeai-433a7140-ehutt-trail-benchmark-new-tasks.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# 04.28.2025: TLS support for Phoenix server

> Available in Phoenix 8.29+

<Update label="04.28.2025">
  ## TLS Support For Phoenix Server

  Phoenix now supports Transport Layer Security (TLS) for both HTTP and gRPC connections, enabling encrypted communication and optional mutual TLS (mTLS) authentication. This enhancement provides a more secure foundation for production deployments.

  ### **Highlights:**

  * **Secure HTTP & gRPC Connections:** Phoenix can now serve over HTTPS and secure gRPC.
  * **Flexible TLS Configuration:** TLS settings are managed via environment variables.
  * **Optional Client Verification:** Support for mTLS with configurable client certificate validation.
  * **Improved Testing:** TLS-aware infrastructure added to integration tests.
  * **Better Visibility:** Server startup logs now display TLS status.

  ### **Configuration Options**

  Set the following environment variables to enable and customize TLS:

  | Variable | Type | Description |
  | - | - | - |
  | `PHOENIX_TLS_ENABLED` | boolean | Enable or disable TLS (`true`/`false`) |
  | `PHOENIX_TLS_CERT_FILE` | string | Path to TLS certificate file |
  | `PHOENIX_TLS_KEY_FILE` | string | Path to private key file |
  | `PHOENIX_TLS_KEY_FILE_PASSWORD` | string | Password for encrypted private key file |
  | `PHOENIX_TLS_CA_FILE` | string | Path to CA certificate (for client verification) |
  | `PHOENIX_TLS_VERIFY_CLIENT` | boolean | Enable client cert verification |

  <Info>
    **Note:** Encrypted private keys require the `cryptography` Python package for decryption.
  </Info>
</Update>
