Set 'minimum tls inbound cipher suite' using powershell

Question

Hi,

I am looking for the property which lets me set minimum tls inbound cipher suite for the azure app service using powershell.

I have been looking for it in the "set-azwebapp" but I could only find '-mintlsversion'

however there is an API based solution available to set this setting like below,

https://azure.github.io/AppService/2022/10/11/Public-preview-min-tls-cipher-suite.html

But I am specifically looking for powershell way of doing it.

Answer 1

Hi @WinTechie you can try this command:

New-AzWebAppSSLBinding -ResourceGroupName <resource-group-name> -WebAppName <app-service-name> -Name <ssl-binding-name> -MinProtocolVersion <min-tls-version> -MinCipherSuite <min-cipher-suite>

You can also set minimum tls inbound cipher suite for the azure app in the Azure portal:

You can find this feature in your resource overview page under “Configuration” > “General settings” > “Min TLS Cipher Suite (preview)”. Click on “change” to configure your minimum TLS cipher suite. 

Best,

-Grace

Answer 2

@WinTechie Give below code a try--it's what I've been testing with:

$webapp = Get-AzResource -Name mywebapp -ResourceGroupName myresourcegroup -ResourceType Microsoft.Web/sites
$webapp.Properties.siteConfig.minTlsCipherSuite = "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
$webapp|Set-AzResource -Force