TLS 1.3 Support in Azure Automation Sandbox

Question

I was wondering if anyone has any insight on when Azure Automation Sandboxes will support TLS 1.3 for PowerShell runbooks. Microsoft and by extension Defender are pushing TLS 1.3 across all Azure resources, but I can’t connect to them using runbooks because the sandboxes are still running Windows 10 on the backend. Unfortunately, I don’t have an option to use a hybrid worker. I’m not seeing anything on the Azure Updates feed about this.

Answer 1

TLS 1.3 do not officially support for Azure Automation Sandboxes PowerShell runbooks. And when it comes to TLS 1.0 and 1.1, Microsoft has already announced the retirement of those for Azure Automation resources.

Thanks @Philipp von dem Bussche for pointing in the right direction. If the requirement is still with the TLS 1.3 support for automating the tasks, you can use a use a runbook configuration without hybrid workers.

You can use the updated environment experience in the Azure to create a PowerShell 7.4 runtime for your runbooks.

Once set up, you can configure your runbook to use TLS 1.3 by adding the below line of code to your script:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls13

There are two ways to change the runtime of a runbook. You can directly edit the runbook runtime through the runbook editor in the portal. Alternatively, you can refer this MSDoc to set up the environment which ensures the runtime type has been correctly updated.

Hope this helps!

If the answer is helpful, please click on Accept Answer and upvote it. If you still have any queries, please feel free to reach out through comment.