Description:
In some cases, Azure Storage sets the minimum TLS version to be version 1.0 by default. TLS 1.0 is a legacy version and has known vulnerabilities. This minimum TLS version can be configured to be later protocols such as TLS 1.2.
Rationale:
TLS 1.0 has known vulnerabilities and has been replaced by later versions of the TLS protocol. Continued use of this legacy protocol affects the security of data in transit.
When set to TLS 1.2 all requests must leverage this version of the protocol. Applications leveraging legacy versions of the protocol will fail.
From Azure Console
From Azure CLI
az storage account update
--name
--resource-group
--min-tls-version TLS1_2
From Azure PowerShell
To set the minimum TLS version, run the following command:
Set-AzStorageAccount -AccountName '
-ResourceGroupName '
-MinimumTlsVersion TLS1_2