TLS 1.2 enforcement for Azure Automation vs. Azure Arc

Question

We have received the information regarding the TLS 1.2 enforcement for Azure Automation - see MS article: https://learn.microsoft.com/en-us/azure/automation/automation-managing-data#tls-for-azure-automation

We have the following construct in use for certain operational topics and automations:

1. runbook executes Run Command via Multi Tenant App via Azure Arc Agent > Run Command contains PowerShell Script, which collects data on end system
2. PowerShell script is executed on systems
3. output is saved from end system via SAS URL on storage account

Now my question: according to the MS article, only communication to the Automation Account is affected. Are there any communication paths in our setup that would also be affected by the enforcement of TLS 1.2?

Answer 1

Hi,

According to the provided information only the execution of the runbook will be affected if that runbook is called via webhook. If it is called via Portal you should not be affected as the browser will automatically pick TLS 1.2. It is unclear if you execute the runbook on Hybrid worker or on Azure workers. I would assume it is Azure workers. Note that Storage accounts will also enforce TLS 1.2 by the end of the year so if you haven't migrated better do it.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.