Clarification on TLS 1.0/1.1 Deprecation Notification

Question

I recently received a notification about the deprecation of TLS 1.0 and TLS 1.1 by 28 February 2025. From what I can tell, all our resources use TLS 1.2+, but the default settings say TLS 1.0 (screenshot attached), so I wanted to confirm whether any action is required on our end.

Could you clarify:

1. If the default Service Bus settings say TLS 1.0, would changing this affect any existing service, or just new services?

Appreciate your guidance on this!

Answer 1

Ashton Wilson

Thank you for your follow-up question.

To clarify, changing the default settings to TLS 1.2 in your Azure Service Bus configuration will primarily affect new services. Existing services that already use TLS 1.2 or higher will continue to operate as usual. However, it is essential to ensure that all clients and services are updated to support TLS 1.2 or higher to avoid any potential disruptions.

In summary:

• New services: Will use TLS 1.2 by default once you update the settings.
• Existing services: Will not be affected if they are already using TLS 1.2 or higher. However, it is crucial to verify and upgrade any clients or services still using TLS 1.0 or TLS 1.1.

For more detailed information, you can refer to the official Microsoft documentation on configuring the minimum TLS version for Azure Service Bus https://learn.microsoft.com/en-us/azure/service-bus-messaging/transport-layer-security-configure-minimum-version

Please let me know if you have any further questions or need additional assistance. Accept the answer if you find the information helpful.