How X509 Certficate choose the TLS version? Is it related to each other?

Question

How X509 Certficate choose the TLS version? Is it related to each other?

DEEPAK KUMPALA 191

I am using X509 certificate on IoT devices to connect with Azure cloud (DPS and IoT Hub).
Due to vulnerabilities on TLS 1.0, we wanted to upgrade the TLS version. On device OS, we have all 3 versions of TLS (1.0,1.1 and 1.2) enabled.

Question: Which TLS version will be used in communication between client and server? DPS and IoT Hub seems like not supporting 1.2 on the server side.

AshokPeddakotla-MSFT 35,971 Reputation points Moderator

2022-09-30T13:54:06.867+00:00

@DEEPAK KUMPALA Wanted to follow up with you to understand whether the below information helped. Please let us know if there are any other queries.
If below suggestions answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Accepted answer

0 additional answers

Your answer

AshokPeddakotla-MSFT 35,971 Reputation points Moderator

2022-09-30T13:54:06.867+00:00

@DEEPAK KUMPALA Wanted to follow up with you to understand whether the below information helped. Please let us know if there are any other queries.
If below suggestions answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

Hello @DEEPAK KUMPALA ,

on the server side.

You mean Server side is the IoT Hub, right?

IoT Edge devices can be configured to use TLS 1.2 when communicating with IoT Hub. For this purpose, use the IoT Edge documentation page.

Azure IoTHub TLS 1.2 enforcement available in select regions as of Dt: 9/2/2022

To enable TLS 1.2 enforcement, I hope you have already done this step....!

ARM template Link

The minTlsVersion property is read-only and cannot be changed once your IoT Hub resource is created. It is therefore essential that you properly test and validate that all your IoT devices and services are compatible with TLS 1.2 and the recommended ciphers in advance.

TLS configuration for SDK and IoT Edge

Also see SslProtocols

Share via

How X509 Certficate choose the TLS version? Is it related to each other?

0 additional answers

Your answer