How to enable TLS 1.3 in Azure API Management

Question

Philip Van de Vyver 85

My customer has a requirement to implement TLS 1.3.

As I read the article, It should be available across all regions.

How can I enable TLS 1.3 for my API Management instance?
I was following the guide: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-manage-protocols-ciphers
But I still can't see the TLS 1.3 option to enable over here.

Any suggestions?

1 answer

Answer 1

Anonymous

Hi It should be there but the portal UI is not quite caught up far as I know

if you go to "protocols + ciphers" and the ciphers tab you should see TLS 1.3 ciphers (the top two)

User's image

Then run an SSL Labs test against your apim domain (<your apim name>.azure-api.net) and you should see
User's image

Philip Van de Vyver 85 Reputation points

2024-06-28T06:54:03.4733333+00:00

Thank you for the answer Ben.

The ciphers you mentioned are Enabled for the API Management instance:

However, when I run the test, TLS 1.3 isn't enabled: Are these the correct ciphers?

FYI: As test, I deployed a new API Management instance, with this instance I was able to perform a successful test.
Anonymous

2024-06-28T09:12:53.77+00:00

They are the correct ciphers However as noted in the original blog can you check if your apim clients are renegotiating because apim doesn't support this for TLS 1.3 and this is a reason you'd not see 1.3 enabled ref https://techcommunity.microsoft.com/t5/azure-integration-services-blog/announcing-the-availability-of-tls-1-3-in-azure-api-management/ba-p/4047586