Can I continue using TLS 1.0 or TLS 1.1 on Azure MySQL databases after August 31, 2025?

Question

Hello,

There is an Azure announcement for the end of support for TLS 1.0 and TLS 1.1 for several services on August 31, 2025.

I currently have several Azure Database for MySQL Flexible Server resources configured with these TLS versions.

However, none of them are listed on the Advisor page in the Services Retirement Workbook

This means that you will still be able to continue working with TLS 1.0 and TLS 1.1 versions on MySQL resources after the indicated date ?

Thank you.

Answer 1

Unfortunately you won't be able to. As per https://techcommunity.microsoft.com/blog/azuresqlblog/preparing-for-the-deprecation-of-tls-1-0-and-1-1-in-azure-databases/4426512

Starting August 31, 2025, we will force upgrade servers with minimum TLS 1.0 or 1.1 to TLS 1.2, and connections using TLS 1.0 or 1.1 will be disallowed, and connectivity will fail. To avoid potential service interruptions, we strongly recommend customers complete their migration to TLS 1.2 before August 31, 2025. 

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

Hi,

Based on the current documentation they will start forced upgrade of TLS 1.0/1.1 servers on August 31, 2025 and at some point after that TLS 1.0/1.1 connections will fail.

Excerpt from documentation:

Starting on August 31, 2025, we will begin the forced upgrade for all servers still using TLS 1.0 or 1.1. After this date, any connections relying on TLS 1.0 or 1.1 may stop working at any time. To avoid potential service disruptions, we strongly recommend that customers complete their migration to TLS 1.2 before August 31, 2025.

I recommend upgrading your applications so that they work with TLS 1.2. If that isn't possible, then one potential option would be to run MySQL on a VM, that way you have full control and can run whichever versions of TLS you need.

It is possible they will extend the deadline again, but as of now I haven't seen mention of it.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP