Skip to content

Commit 37e6b4f

Browse files
ttorblettorble
authored
Merge pull request #278268 from MicrosoftDocs/main
Publish to live, Friday 4 AM PST, 6/14
2 parents 40ff93a + 7130cfc commit 37e6b4f

File tree

61 files changed

+184
-98
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

61 files changed

+184
-98
lines changed

‎articles/api-management/self-hosted-gateway-settings-reference.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,13 +107,25 @@ This guidance helps you provide the required information to define how to authen
107107

108108
## Security
109109

110+
### Certificates and Ciphers
111+
110112
| Name | Description | Required | Default | Availability |
111113
| ------------- | ------------- | ------------- | ----| ----|
112114
| certificates.local.ca.enabled | Indication whether or not the self-hosted gateway should use local CA certificates that are mounted. It's required to run the self-hosted gateway as root or with user ID 1001. | No | `false` | v2.0+ |
113115
| net.server.tls.ciphers.allowed-suites | Comma-separated list of ciphers to use for TLS connection between API client and the self-hosted gateway. | No | `TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA` | v2.0+ |
114116
| net.client.tls.ciphers.allowed-suites | Comma-separated list of ciphers to use for TLS connection between the self-hosted gateway and the backend. | No | `TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA` | v2.0+ |
115117
| security.certificate-revocation.validation.enabled | Provides capability to turn certificate revocation list validation on/off | No | `false` | v2.3.6+ |
116118

119+
### TLS
120+
121+
| Name | Description | Required | Default | Availability |
122+
| ------------- | ------------- | ------------- | ----| ----|
123+
| Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Tls13 | Indication whether or not SSL 3.0 is allowed towards the backend. Similar to [managing protocol ciphers in managed gateway](api-management-howto-manage-protocols-ciphers.md). | No | `true` | v2.0+ |
124+
| Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Tls12 | Indication whether or not TLS 1.2 is allowed towards the backend. Similar to [managing protocol ciphers in managed gateway](api-management-howto-manage-protocols-ciphers.md). | No | `true` | v2.0+ |
125+
| Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Tls11 | Indication whether or not TLS 1.1 is allowed towards the backend. Similar to [managing protocol ciphers in managed gateway](api-management-howto-manage-protocols-ciphers.md). | No | `false` | v2.0+ |
126+
| Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Tls10 | Indication whether or not TLS 1.0 is allowed towards the backend. Similar to [managing protocol ciphers in managed gateway](api-management-howto-manage-protocols-ciphers.md). | No | `false` | v2.0+ |
127+
| Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Ssl30 | Indication whether or not SSL 3.0 is allowed towards the backend. Similar to [managing protocol ciphers in managed gateway](api-management-howto-manage-protocols-ciphers.md). | No | `false` | v2.0+ |
128+
117129
## Sovereign clouds
118130

119131
Here is an overview of settings that need to be configured to be able to work with sovereign clouds:

‎articles/azure-arc/system-center-virtual-machine-manager/administer-arc-scvmm.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@ ms.date: 12/04/2023
66
ms.service: azure-arc
77
ms.subservice: azure-arc-scvmm
88
ms.custom: devx-track-azurecli
9-
author: Farha-Bano
10-
ms.author: v-farhabano
9+
author: PriskeyJeronika-MS
10+
ms.author: v-gjeronika
1111
manager: jsuri
1212
---
1313

‎articles/azure-arc/system-center-virtual-machine-manager/agent-overview-scvmm.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@ title: Overview of Azure Connected Machine agent to manage Windows and Linux mac
33
description: This article provides an overview of the Azure Connected Machine agent, which supports monitoring virtual machines hosted in hybrid environments.
44
ms.date: 11/15/2023
55
ms.topic: conceptual
6-
author: Farha-Bano
7-
ms.author: v-farhabano
6+
author: PriskeyJeronika-MS
7+
ms.author: v-gjeronika
88
manager: jsuri
99
ms.services: azure-arc
1010
ms.subservice: azure-arc-scvmm

‎articles/azure-arc/system-center-virtual-machine-manager/create-virtual-machine.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ ms.date: 11/15/2023
55
ms.topic: how-to
66
ms.services: azure-arc
77
ms.subservice: azure-arc-scvmm
8-
author: Farha-Bano
9-
ms.author: v-farhabano
8+
author: PriskeyJeronika-MS
9+
ms.author: v-gjeronika
1010
manager: jsuri
1111
keywords: "VMM, Arc, Azure"
1212
---

‎articles/azure-arc/system-center-virtual-machine-manager/deliver-esus-for-system-center-virtual-machine-manager-vms.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ ms.date: 12/05/2023
55
ms.topic: how-to
66
ms.services: azure-arc
77
ms.subservice: azure-arc-scvmm
8-
author: Farha-Bano
9-
ms.author: v-farhabano
8+
author: PriskeyJeronika-MS
9+
ms.author: v-gjeronika
1010
manager: jsuri
1111
keywords: "VMM, Arc, Azure"
1212
---

‎articles/azure-arc/system-center-virtual-machine-manager/disaster-recovery.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@ ms.custom:
66
ms.date: 12/28/2023
77
ms.services: azure-arc
88
ms.subservice: azure-arc-scvmm
9-
author: Farha-Bano
10-
ms.author: v-farhabano
9+
author: PriskeyJeronika-MS
10+
ms.author: v-gjeronika
1111
manager: jsuri
1212
---
1313

‎articles/azure-arc/system-center-virtual-machine-manager/enable-group-management.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ ms.date: 11/15/2023
55
ms.topic: conceptual
66
ms.services: azure-arc
77
ms.subservice: azure-arc-scvmm
8-
author: Farha-Bano
9-
ms.author: v-farhabano
8+
author: PriskeyJeronika-MS
9+
ms.author: v-gjeronika
1010
manager: jsuri
1111
keywords: "VMM, Arc, Azure"
1212
---

‎articles/azure-arc/system-center-virtual-machine-manager/enable-guest-management-at-scale.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@ title: Install Arc agent at scale for your SCVMM VMs
33
description: Learn how to enable guest management at scale for Arc-enabled SCVMM VMs.
44
ms.service: azure-arc
55
ms.subservice: azure-arc-scvmm
6-
author: Farha-Bano
7-
ms.author: v-farhabano
6+
author: PriskeyJeronika-MS
7+
ms.author: v-gjeronika
88
manager: jsuri
99
ms.topic: how-to
1010
ms.date: 03/27/2024

‎articles/azure-arc/system-center-virtual-machine-manager/enable-scvmm-inventory-resources.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@ title: Enable SCVMM inventory resources in Azure Arc center
33
description: This article helps you enable SCVMM inventory resources from Azure portal
44
ms.service: azure-arc
55
ms.subservice: azure-arc-scvmm
6-
author: Farha-Bano
7-
ms.author: v-farhabano
6+
author: PriskeyJeronika-MS
7+
ms.author: v-gjeronika
88
manager: jsuri
99
ms.date: 11/15/2023
1010
ms.topic: how-to

‎articles/azure-arc/system-center-virtual-machine-manager/enable-virtual-hardware-scvmm.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ ms.topic: how-to
55
ms.date: 01/05/2024
66
ms.service: azure-arc
77
ms.subservice: azure-arc-scvmm
8-
author: Farha-Bano
9-
ms.author: v-farhabano
8+
author: PriskeyJeronika-MS
9+
ms.author: v-gjeronika
1010
manager: jsuri
1111
---
1212

0 commit comments

Comments
 (0)