Azure TLS version 1.0 and 1.1 end of support

Ramona Istrate 40

Hello,

I have a question regarding the end of support for TLS 1.0 and 1.1. The official article states that starting November 1st, support for these versions will end, and the minimum supported version will be TLS 1.2. However, it is unclear what will happen after November 1st. will TLS 1.0 and 1.1 still be available and continue to work without support, or will they be completely removed from Azure?

I still have some storage accounts which are on TLS 1.0 and 1.1 and I need to know what will happen if I can't do the migration to TLS 1.2.

Thank you.

Hari Babu Vattepally 555 Reputation points Microsoft Vendor

2024-10-07T12:14:07.1866667+00:00

Hi @Ramona Istrate

Welcome to Microsoft Q&A Forum. Thanks for submitting your query.

Microsoft officially says that "support for TLS 1.0 and TLS 1.1 will end by October 31, 2024".

Azure Storage will stop supporting TLS versions 1.1 and 1.0 due to the changes in technology and rules. After November 1, 2024, the minimum supported version will be TLS 1.2. TLS 1.2 is better than TLS 1.0 and 1.1 because it provides better security and speed. TLS 1.0 and 1.1 do not have modern cryptographic algorithms and cipher suites.

However, Azure Storage uses TLS 1.2 on public HTTPS endpoints, but TLS 1.0 and TLS 1.1 are still supported for backward compatibility.

Also, Azure Storage accounts allow clients to send and receive data using TLS 1.0 or newer versions. However, you can make your storage account more secure by requiring clients to use a newer version of TLS. If you set a minimum version of TLS for your storage account, any requests made with an older version will not work.

If there are any storage accounts which has TLS 1.0 and 1.1, Microsoft recommend transitioning them to TLS 1.2 or later by October 31, 2024. Which will avoid potential service disruptions, make sure that your services are using TLS 1.2 or newer version.

To avoid disruptions to your applications connecting to Azure Storage, you must migrate to TLS 1.2 and remove dependencies on TLS version 1.0 and 1.1.

For more information, please refer the below documents.

https://learn.microsoft.com/en-us/lifecycle/announcements/tls-support-ending-10-31-2024?source=recommendations

Below documents gives the information related to impact and solutions of TLS.

https://azure.microsoft.com/en-us/updates/tls-12-to-become-the-minimum-tls-version-for-azure-storage/

Please refer the below document, which provides the information on Migrating to TLS 1.2 for Blob Storage.

https://learn.microsoft.com/en-us/azure/storage/common/transport-layer-security-configure-migrate-to-tls2?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json&bc=%2Fazure%2Fstorage%2Fblobs%2Fbreadcrumb%2Ftoc.json

Hope the above given information clarifies your query. Please let us know, if there is anything else. It will be our pleasure assisting you.
Ramona Istrate 40 Reputation points

2024-10-07T13:41:22.4666667+00:00

Hi Hari,

Thanks for the answer, but still not clear what will happen with storage accounts which are on TLS 1.0 or 1.1 after Nov 1, 2024, if I can't upgrade them. Currently , if we go to the storage account settings, we have the option to choose the minimum TLS version from 1.0, 1.1, and 1.2. After November 1st, will versions 1.0 and 1.1 disappear from the settings? Or will they remain, and in case of any issues, Microsoft will not offer support until an upgrade to TLS 1.2 is made?

Thank you

Accepted answer

TP 98,086 Reputation points

2024-10-07T11:36:50.65+00:00

Hi Ramona,

Support for TLS 1.0/1.1 for Blob Storage ends starting November 1st, 2025, which is a change from the original November 1st, 2024 date. Regardless of the new deadline, I recommend you prioritize updating to TLS 1.2 as soon as possible.

However, it is unclear what will happen after November 1st. will TLS 1.0 and 1.1 still be available and continue to work without support, or will they be completely removed from Azure?

When support for TLS 1.0/1.1 ends you will no longer be able to connect to your storage account using TLS 1.0/1.1. What this means is, if you have a client application/device that only supports TLS 1.0 or 1.1, it will no longer be able to access your storage accounts.

TLS 1.0 and 1.1 support will be removed for new & existing Azure storage accounts starting Nov 2025

https://techcommunity.microsoft.com/t5/azure-storage-blog/tls-1-0-and-1-1-support-will-be-removed-for-new-amp-existing/ba-p/4026181

Migrate to TLS 1.2 for Azure Blob Storage

https://learn.microsoft.com/en-us/azure/storage/common/transport-layer-security-configure-migrate-to-tls2

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP
Please sign in to rate this answer.

1 person found this answer helpful.
Ramona Istrate 40 Reputation points

2024-10-07T12:42:49.9066667+00:00

Hi TP,

Thanks for the fast answer, but something doesn’t seem right. On my storage accounts where I have TLS version 1.0 or 1.1, I see this informational message: “Storage is retiring support for TLS 1.0 and 1.1 starting Nov 1, 2024. If you are using any of these, please migrate to TLS 1.2.” and this link:

https://azure.microsoft.com/en-us/updates/tls-12-to-become-the-minimum-tls-version-for-azure-storage/

And in Service Health I have received some advisories for other resources to upgrade TLS to 1.2 by Nov 1, 2024.

Thank you

Hari Babu Vattepally 555 Reputation points Microsoft Vendor

2024-10-07T13:04:15.3633333+00:00

Hi @Ramona Istrate

If you have received notifications in Service Health to upgrade to TLS 1.2 for other resources by November 1, 2024, you should upgrade to TLS 1.2 before the deadline to avoid any issues. You can check the Microsoft documentation to learn how to upgrade to TLS 1.2 for the specific resources that require it. If you need more help, please let me know for further assistance.

TP 98,086 Reputation points

2024-10-07T13:23:01.1566667+00:00

@Ramona Istrate Originally the deadline was 2024. They just recently (days ago) changed it to 2025. My assumption would be the updates to the text have not been made to portal yet, which is why the old date is showing there.

TP 98,086 Reputation points

2024-10-07T17:59:38.3933333+00:00

@Ramona Istrate UPDATE: I confirmed with a member of the product group that the deadline is now November 1st, 2025. The articles are in the process of being updated.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure TLS version 1.0 and 1.1 end of support

0 additional answers

Your answer