# Azure: TLS 1.1 and 1.0 End of Support

## Date for your calendars

On the 31st of October 2024, Azure services using TLS 1.1 or 1.0 will end support. This will result in potential risk when requiring support with services still on this version.

## Recommendation

Microsoft recommends upgrading your TLS versions on Azure services to 1.2 or later.

## How to tell if my resource uses anything below TLS 1.2

I haven't found a fast way yet if you only use the portal to configure Azure services. You will have to go into each service to identify the version.

### Storage Accounts

1. Select a **Storage Account** resource
    
2. Select **Configuration** from the side menu
    
3. Locate **Minimum TLS version**
    

### Web App

1. Select a **Web App** resource
    
2. Select **Configuration** from the side menu
    
3. Select **General settings** from one of the tabs on the page
    
4. Locate **Minimum Inbound TLS Version**
    

### SQL Managed Instance

1. Select a **SQL Managed Instance** resource
    
2. Select **Networking** from the side menu
    
3. Locate **Minimum TLS version**
    

### Azure Database for PostgreSQL

1. Select an **Azure Database for PostgreSQL** resource
    
2. Select **Connection security** from the side menu
    
3. Locate **Minimum TLS version**
    

### Azure Cosmos DB Account

1. Select an **Azure Cosmos DB account** resource
    
2. Select **Networking** from the side menu
    
3. Select **Connectivity** from one of the tabs on the page
    
4. Locate **Minimum Transport Layer Security Protocol**
    

### Function App

1. Select a **Function App** resource
    
2. Select **Configuration** from the side menu
    
3. Select **General settings** from one of the tabs on the page
    
4. Locate **Minimum Inbound TLS Version**
    

## Considerations

Before changing to TLS 1.2 or above:

* Check connectivity support for anything utilising the resource
    
* Test on an environment to make sure there is no impact on change
    
* The change could impact legacy software, so check the compatibility
    
* Check any configurations where TLS may be specified
    

%%[buymeacoffe-butyellow]