How to configure TLS 1.3 for Service Bus and Event Hub

Question

As per below documentation, TLS 1.3 is enabled for Service bus and Event hubs, but TLS 1.3 option is not available in Configuration page of those resources. Also we are still able to select TLS 1.0 and 1.1 while creating new resources.

How do we configure TLS 1.3 as minimum for Service Bus and Event hub? Is there any action Azure users need to take in order to TLS 1.3

https://learn.microsoft.com/en-us/answers/questions/1792567/upcoming-tls-changes-for-azure-service-bus-azure-e

Answer 1

Hi,

Currently the highest minimum you can set is TLS 1.2. As a test, I tried to set it to TLS 1.3 via the REST API, and received below error:

{
  "error": {
    "code": "InvalidMinTLSValue",
    "message": "The specified minimumTLSVersion 1.3 is unsupported."
  }
}

I tested using Qualsys SSL Labs and the results were that TLS 1.0, 1.1, 1.2, and 1.3 are supported. If you have minimum set to TLS 1.2 you will not be able to use 1.0 or 1.1, despite the test results. If you have client capable of TLS 1.3 it should be able to use that.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP