During the installation, for secured service communication inVia uses the Lets Encrypt CA authority to sign the certificate for the web server.
inVia generates a CSR that is then signed using Lets Encrypt and ensures that all communication to the server is TLS/SSL enabled.
After secured and signed certificate installation, the browser can show the certificate validation.
![Certificate details](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/cert-details=GUID-FCC39588-9865-4E23-82E9-E2C09777C334=1=en-us=Low.png)
All inVia applications are TLS/SSL enabled by default.
Certificate valid verification
To verify and establish the SSL connection, run the following command:
openssl s_client -connect logic.invia-prod.warehouse.inviarobotics.net:443 -showcerts
![Certificate verification CLI sample](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/cert-verif-sample=GUID-ECEFEB99-C257-4788-A02C-90C156606CBB=1=en-us=Low.png)
inVia manages the certificate rotation and expiry of the certificate.
inVia Logic
By default, all the inVia applications use trusted signed certificates.
![Signed and trusted padlock icon](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/padlock=GUID-2E53C210-AA34-4192-ADE5-3C26DED20FD1=1=en-us=Low.png)