Log TLS version being used for connections to Azure SQL Databsae

Question

With Azure deprecating TLS 1.0/1.2 for SQL Database, how can I log what version clients are currently using to connect?

Answer 1

Hello Shane Schlabach

I understand that you want to know how to check the TLS version of the Azure SQL Database that your clients are currently using.

Azure has announced that support for older TLS versions (TLS 1.0 and 1.1) will end on August 31, 2025. For more information, see TLS 1.0 and 1.1 deprecation. 

Customers still using TLS 1.0 or 1.1 should transition their workloads to TLS 1.2 or later versions to ensure uninterrupted connectivity to Azure services.  Customers will no longer be able to set the minimum TLS version for Azure SQL Database client connections below TLS 1.2.

Please follow the steps below to configure the minimum TLS version for client connections by using the Azure portal, Azure PowerShell, or the Azure CLI.

Go to the Azure portal and go to the logical server in Azure.
Under Security, select the Networking page.

Choose the Connectivity tab. Select the Minimum TLS Version desired for all databases associated with the server and select Save.

Note:

Please refer the below documentation for better understanding,
https://learn.microsoft.com/en-us/azure/azure-sql/database/connectivity-settings?view=azuresql&tabs=azure-portal#minimum-tls-version

https://azure.microsoft.com/en-us/updates?id=update-retirement-tls1-0-tls1-1-versions-azure-services

I hope, This response will address your query and helped you to overcome on your challenges.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.