Does an Update of minimum TLS version of your Azure Storage account to 1.2 affect its working

Question

Does an Update of minimum TLS version of your Azure Storage account to 1.2 affect its working. Is cost involved or require any downtime for the changes?

Answer 1

Hi Harshitha Ramesh - Thanks for reaching out over Q&A Forum.

From the effect standpoint, if there are any calls that are hitting storage on lower version such as TlS1.0 or TLS 1.1, after setting the min TLS version as TLS 1.2 on the account, those calls shall tend to fail. If the calls are hitting on TLS1.2 already, then it should not affect.

https://learn.microsoft.com/en-us/azure/storage/common/transport-layer-security-configure-migrate-to-tls2?source=recommendations

https://learn.microsoft.com/en-us/azure/storage/common/transport-layer-security-configure-minimum-version?source=recommendations&tabs=portal

There is no cost involved in making the changes and also no downtime required as it a configuration change.

To ensure there is no connectivity issue, you can check for current version of calls hitting the storage and plan ahead.

https://learn.microsoft.com/en-us/azure/storage/blobs/monitor-blob-storage?tabs=azure-portal

Hope the above answer helps! Please let us know do you have any further queries.

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members. 

Answer 2

Hello Ramesh,

I understand that your inquiry regarding whether the costs associated with the update of the minimum TLS version of your Azure Storage account to 1.2 will have any impact or necessitate any downtime.Please be informed that updating the minimum TLS version incurs no expenses. This modification is purely a configuration adjustment and does not necessitate any downtime. The complete propagation of this change throughout the system may take as long as 30 seconds.

For example, any applications or services, be utilizing TLS 1.0 or TLS 1.1 at present, those requests will be unsuccessful following the transition to TLS 1.2. Applications already using TLS 1.2 will continue to function without any issues. So Updating the minimum TLS version of your Azure Storage account to 1.2 should not affect its operation if your applications are already using TLS 1.2. There is no cost associated with this change, and it does not require any downtime, although it may take up to 30 seconds for the change to fully propagate

References: https://learn.microsoft.com/en-us/azure/storage/common/transport-layer-security-configure-migrate-to-tls2

Hope the above answer helps! Please let us know do you have any further queries.

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.