Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
710 questions
@Somnath Shukla
Thank you for your post! Data may be restricted to TLS 1.2 through configuration on the client side.
All traffic to Azure Key Vault for authentication, management, and data plane access, is encrypted and goes over HTTPS: port 443. However, there will occasionally be HTTP [port 80] traffic for CRL. Azure Key Vault continues to allow TLS 1.1 and TLS 1.0 data to be ingested. Data may be restricted to TLS 1.2 through configuration on the client side.
For more info:
Azure Security Baseline for Key Vault - 4.4: Encrypt all sensitive information in transit
Access Azure Key Vault behind a firewall
Thank you for your time and patience throughout this issue.
----------
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
I understand that it depend on client. But i want to force that my client can only use tls1.2
Like in storage , redis, sql server we minimum supported version. i wanted to force the same. as a Key vault owner. i want to control my minimum tls version.
@Somnath Shukla
Thank you for the quick follow up!
Unfortunately, restricting the Key Vault to a minimum TLS version of 1.2 isn't supported at this time, based off the documentation you can only do this from the client side (i.e. within your storage account, redis, sql server, etc.).
If you'd like to create a feature request for our AKV engineering team, please feel free to utilize our User Voice forum.
Thank you for your time and patience throughout this issue.