what versions of TLS are supported by Azure Information Protection for decryption via MIP SDK

Question

Eugene Elyashev 20

Our application is making use of MIP SDK to connect to AIP for file decryption. What versions of TLS are supported currently?

Accepted answer

0 additional answers

Answer 1

Givary-MSFT 35,606 Microsoft Employee Moderator

@Eugene Elyashev Thank you for reaching out to us, As far I am aware, TLS 1.2 is mandatory for the MIP SDK communication.

As per this documentation - https://learn.microsoft.com/en-us/information-protection/develop/version-release-history TLS 1.2 was enforced for all communications way back in 2020.

However will check with my team to reconfirm the same and keep you posted.

Eugene Elyashev 20 Reputation points

2023-04-11T15:46:37.7533333+00:00

Thanks for the link! The doc says that TLS 1.2 is enforced. What would happen if our client supports TLS 1.3? Would Azure negotiate the 1.3 or 1.2?
Givary-MSFT 35,606 Reputation points Microsoft Employee Moderator

2023-04-12T10:27:53.13+00:00

@Eugene Elyashev The MIP SDK currently supports TLS 1.2. It will negotiate TLS 1.2. Currently Azure does 1.2.

Refer to this how SSL/TLS connection is established - https://techcommunity.microsoft.com/t5/azure-paas-blog/ssl-tls-connection-issue-troubleshooting-guide/ba-p/2108065 If client only uses TLS 1.3, connection will terminate at the first step itself, It is always client that starts a conversation by sharing the TLS version and list of ciphersuite enabled.

Let me know if you have any further questions, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.
Eugene Elyashev 20 Reputation points

2023-04-12T15:18:45.55+00:00

Thanks for your answer. Yeah, this is what happens: if we only support TLS 1.3 it would not connect. Are there any plans to upgrade the TLS version to 1.3 for MIP service?