This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 91%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPV%3C/text%3E%3C/svg%3E)
My customer has a requirement to implement TLS 1.3.
I understand that TLS 1.3 is announced 05 February 2024. See: https://techcommunity.microsoft.com/t5/azure-integration-services-blog/announcing-the-availability-of-tls-1-3-in-azure-api-management/ba-p/4047586
As I read the article, It should be available across all regions.
How can I enable TLS 1.3 for my API Management instance?
I was following the guide: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-manage-protocols-ciphers
But I still can't see the TLS 1.3 option to enable over here.
Any suggestions?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 23%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFT%3C/text%3E%3C/svg%3E)
Hello,
Azure API Management support TLS1.3 out of the box since early 2024.
Notes:
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 93%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBG%3C/text%3E%3C/svg%3E)
Hi It should be there but the portal UI is not quite caught up far as I know
if you go to "protocols + ciphers" and the ciphers tab you should see TLS 1.3 ciphers (the top two)
Then run an SSL Labs test against your apim domain (<your apim name>.azure-api.net) and you should see
Thank you for the answer Ben.
The ciphers you mentioned are Enabled for the API Management instance:
However, when I run the test, TLS 1.3 isn't enabled:
Are these the correct ciphers?
FYI: As test, I deployed a new API Management instance, with this instance I was able to perform a successful test.
They are the correct ciphers However as noted in the original blog can you check if your apim clients are renegotiating because apim doesn't support this for TLS 1.3 and this is a reason you'd not see 1.3 enabled ref https://techcommunity.microsoft.com/t5/azure-integration-services-blog/announcing-the-availability-of-tls-1-3-in-azure-api-management/ba-p/4047586