About "Remove TLS 1.0 and 1.1 from use with Azure Cache for Redis"

Question

When I checked Azure Redis, I found the following wording from the advisor.

“TLS versions 1.0 and 1.1 are known to be susceptible to security attacks, and have other Common Vulnerabilities and Exposures (CVE) weaknesses.”

I checked below and read that anything below TLS1.2 is not recommended and 1.0,1.1 will be deprecated at some point.

https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-remove-tls-10-11

I would like to confirm again what kind of response can be considered.

・First of all, it is correspondence on the “Azure Redis” side,

Since the minimum version of TLS was 1.0 in "Advanced settings", is it possible to raise it to 1.2?

If it is not found on the application side, I think that it will be necessary to deal with it on the Azure Redis side.

Thank you.

Answer 1

Hi
加賀崎 隼 •,

Thanks for posting this question in Microsoft Q&A forum and for using Azure Services.

"The default minimum TLS version is 1.2 for new cache instances, at least as of 2020.  So, if you’re using TLS 1.2 in your application already, We don’t believe that you’ll need to make any changes. Setting this value explicitly to TLS 1.2 would also be fine.

 

Our understanding is that this field basically allows you to disable support for lower versions of TLS (i.e. 1.0 and 1.1) if you want to ensure those versions aren’t used for security purposes.

Do let us know if you have different ask.

Thanks.

Answer 2

Hi 加賀崎 隼 •,

Thanks for your patience.

I think the one other thing to mention is that if the customer is not using TLS, they will need to disable TLS/SSL access. This is very easy to do: How to configure Azure Cache for Redis | Microsoft Learn

If not connecting with TLS, then should disable TLS access and connect with port 6379. If using TLS, then should be good to go, and they would use port 6380.

Let us know if this helps. If this answers your query, do click Accept Answer and Mark Helpful for the same. And, if you have any further query do let us know.

Thank you

Answer 3

Hi 加賀崎 隼 •,

Thanks for your patience.

I think the one other thing to mention is that if the customer is not using TLS, they will need to disable TLS/SSL access. This is very easy to do: How to configure Azure Cache for Redis | Microsoft Learn

If not connecting with TLS, then should disable TLS access and connect with port 6379. If using TLS, then should be good to go, and they would use port 6380.Hope this helps. Thank you