Is there a way to force a windows server to use TLS 1.2 or greater when communicating with Azure arc agent

Matthew K Johnson 0

We are trying to make sure our servers utilize TLS 1.2 or greater when communicating to azure arc (agent.) They can still use TLS<1.2 for other things but with arc agent always use 1.2 or higher.

What is the best way to accomplish this at scale?

Thank you,

Rahul Podila 1,485 Reputation points Microsoft Vendor

2025-01-16T03:00:45.3933333+00:00

Hi @Matthew K Johnson

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

To ensure that your servers use TLS 1.2 or higher when migrating to Azure Arc If you want to allow older versions such as TLS 1.0 or 1.1 for other services, you can enable TLS 1.2 and disable TLS 1.0 and 1.1 on your servers On Windows servers.

configure your TLS 1.0 and 1.1 Registry to enable Editing can do this, but make sure TLS 1.2 is set to enabled. On Linux servers, you can update the configuration to allow only TLS 1.2 or higher for secure communication.

If you have multiple servers, it’s a good idea to automate this process with tools like Ansible, Puppet, or Azure Automation. This way you can apply policies quickly and consistently across your servers. The Azure Arc agent will automatically follow this server configuration, so it will use TLS 1.2 or higher when communicating with Azure Arc.

By doing this, your servers use a secure TLS 1.2+ connection for Azure Arc, while still being able to use older versions for other connections.

If you have any concerns, please go through this link: -

https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2-server

https://learn.microsoft.com/en-us/azure/azure-arc/servers/overview

let us know if you have any further queries. I’m happy to assist you further.

If the comment is helpful, please click "Upvote it"
Rahul Podila 1,485 Reputation points Microsoft Vendor

2025-01-17T01:11:49.68+00:00

Hi @Matthew K Johnson

Just want to check if the above Comment worked for you or else please let us know if any help, we are always here to help whenever you need us.

If the comment is helpful, please click "Upvote it"

Thankyou
Rahul Podila 1,485 Reputation points Microsoft Vendor

2025-01-20T01:28:28.3766667+00:00

Hi @Matthew K Johnson

We haven't heard back from you. Please reply if you have any questions in this matter and we will gladly continue the discussion.

Share via

Is there a way to force a windows server to use TLS 1.2 or greater when communicating with Azure arc agent

Your answer