"TLS: client offered only unsupported versions" error on client when connecting to the AKS API server

Symptoms

When you try to connect to the Microsoft Azure Kubernetes Service (AKS) API server, you receive the following error message from your client computer or virtual machine:

tls: client offered only unsupported versions

Cause

Your version of the Transport Layer Security (TLS) protocol is out of date. The minimum supported version in AKS is TLS 1.2.

Solution

Upgrade your TLS version to 1.2. For upgrade instructions, see Enable support for TLS 1.2 in your environment.

Contact us for help

If you have questions or need help, create a support request, or ask Azure community support. You can also submit product feedback to Azure feedback community.