Is TLS 1.3 auto-update on microsoft.sql/servers/databases type ?

Question

Hi, I have a question concerning the type microsoft.sql/servers/databases. For the connectivity to the SQL databases, it says that TLS 1.3 is not fully supported and not required for the minimal version. Once 1.3 will be fully supported, is it auto-update ? Or will we need to check on our own ?

Thank you

Answer 1

Hi @Maureen Gavroy (Belfius)

For Azure SQL Database, the Minimum TLS Version is set at the logical server level. Currently, the lowest version you can set is TLS 1.2. TLS 1.3 is not yet available as a minimum TLS version.

Azure SQL Database already supports TLS 1.3 connections for supported clients. However, this is different from setting TLS 1.3 as the minimum required version.

To answer your question: No, Azure will not automatically change the Minimum TLS Version to TLS 1.3. If Microsoft makes TLS 1.3 available as a minimum TLS version in the future, you will need to update the setting yourself if you want to enforce it.

Microsoft has not announced a timeline for when TLS 1.3 will be available as a minimum TLS version.
For more information, please see:

• Azure SQL Database connectivity settings:
  https://learn.microsoft.com/azure/azure-sql/database/connectivity-settings
• TLS 1.3 support for SQL Server and Azure SQL:
  https://learn.microsoft.com/sql/relational-databases/security/networking/tls-1-3

I hope this helps. Please let us know if you have any further questions.