Azure: TLS 1.1 and 1.0 End of Support

Date for your calendars

On the 31st of October 2024, Azure services using TLS 1.1 or 1.0 will end support. This will result in potential risk when requiring support with services still on this version.

Recommendation

Microsoft recommends upgrading your TLS versions on Azure services to 1.2 or later.

How to tell if my resource uses anything below TLS 1.2

I haven't found a fast way yet if you only use the portal to configure Azure services. You will have to go into each service to identify the version.

Storage Accounts

1. Select a Storage Account resource

2. Select Configuration from the side menu

3. Locate Minimum TLS version

Web App

1. Select a Web App resource

2. Select Configuration from the side menu

3. Select General settings from one of the tabs on the page

4. Locate Minimum Inbound TLS Version

SQL Managed Instance

1. Select a SQL Managed Instance resource

2. Select Networking from the side menu

3. Locate Minimum TLS version

Azure Database for PostgreSQL

1. Select an Azure Database for PostgreSQL resource

2. Select Connection security from the side menu

3. Locate Minimum TLS version

Azure Cosmos DB Account

1. Select an Azure Cosmos DB account resource

2. Select Networking from the side menu

3. Select Connectivity from one of the tabs on the page

4. Locate Minimum Transport Layer Security Protocol

Function App

1. Select a Function App resource

2. Select Configuration from the side menu

3. Select General settings from one of the tabs on the page

4. Locate Minimum Inbound TLS Version

Considerations

Before changing to TLS 1.2 or above:

• Check connectivity support for anything utilising the resource

• Test on an environment to make sure there is no impact on change

• The change could impact legacy software, so check the compatibility

• Check any configurations where TLS may be specified