You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/iot-hub/iot-hub-tls-deprecating-1-0-and-1-1.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,15 +1,15 @@
1
1
---
2
-
title: Deprecation TLS 1.0 and 1.1 in IoT Hub and Device Provisioning Service (DPS) | Microsoft Docs
2
+
title: Deprecating TLS 1.0 and 1.1 in IoT Hub and Device Provisioning Service (DPS) | Microsoft Docs
3
3
description: Guidelines regarding deprecation of TLS 1.0 and 1.1 and supported ciphers in IoT Hub and DPS.
4
-
author: rezas
5
-
ms.author: reza
4
+
author: rezasherafat
5
+
ms.author: rezas
6
6
ms.service: iot-hub
7
7
services: iot-hub
8
8
ms.topic: conceptual
9
9
ms.date: 12/16/2019
10
10
---
11
11
12
-
# TLS 1.0 and 1.1 deprecation in IoT Hub and Device Provisioning Service
12
+
# Deprecation of TLS 1.0 and 1.1 in IoT Hub and Device Provisioning Service
13
13
14
14
To provide best-in-class encryption, IoT Hub and Device Provisioning Service (DPS) are moving to Transport Layer Security (TLS) 1.2 as the encryption mechanism of choice for IoT devices and services. As such, legacy support for TLS 1.0 and TLS 1.1 as well as several non-recommended legacy ciphers will be deprecated in **July 1, 2020**.
15
15
@@ -20,7 +20,7 @@ Based on customers' specific circumstances and configurations, deprecation of TL
20
20
21
21
## Supported ciphers
22
22
23
-
Only the following ciphers will be allowed during TLS handshake:
23
+
Only the following ciphers are allowed during TLS handshake:
Copy file name to clipboardExpand all lines: articles/iot-hub/iot-hub-tls-support.md
+4-9Lines changed: 4 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,19 +7,17 @@
7
7
ms.topic: conceptual
8
8
ms.date: 01/10/2020
9
9
ms.author: rezas
10
-
ms.custom: Azure IoT Hub TLS
11
10
---
12
11
13
12
# TLS support in IoT Hub
14
13
15
14
IoT Hub uses Transport Layer Security (TLS) to secure connections from IoT devices and services. Three versions of the TLS protocol are currently supported, namely versions 1.0, 1.1, and 1.2.
16
15
17
-
TLS 1.0 and 1.1 are considered legacy and are [planned for deprecation](./tls-1.2-everywhere.md). It is therefore strongly recommended to use TLS 1.2 as the preferred TLS version when connecting to IoT Hub.
18
-
16
+
TLS 1.0 and 1.1 are considered legacy and are planned for deprecation. For more information, see [Deprecating TLS 1.0 and 1.1 for IoT Hub](iot-hub-tls-deprecating-1-0-and-1-1.md). It is strongly recommended that you use TLS 1.2 as the preferred TLS version when connecting to IoT Hub.
19
17
20
18
## Restrict connections to TLS 1.2 in your IoT Hub resource
21
19
22
-
For added security, it is advised to configure your IoT Hubs to _only_ allow client connections that use TLS version 1.2 and to enforce the use of [recommended ciphers](#recommended-ciphers).
20
+
For added security, it is advised to configure your IoT Hubs to *only* allow client connections that use TLS version 1.2 and to enforce the use of [recommended ciphers](#recommended-ciphers).
23
21
24
22
For this purpose, provision a new IoT Hub in any of the [supported regions](#supported-regions) and set the `minTlsVersion` property to `1.2` in your Azure Resource Manager template's IoT hub resource specification:
25
23
@@ -48,8 +46,8 @@ For this purpose, provision a new IoT Hub in any of the [supported regions](#sup
48
46
49
47
The created IoT Hub resource using this configuration will refuse device and service clients that attempt to connect using TLS versions 1.0 and 1.1. Similarly, the TLS handshake will be refused if the client HELLO message does not list any of the [recommended ciphers](#recommended-ciphers).
50
48
51
-
Note that the `minTlsVersion` property is read-only and cannot be changed once your IoT Hub resource is created. It is therefore essential that you properly test and validate that _all_ your IoT devices and services are compatible with TLS 1.2 and the [recommended ciphers](#recommended-ciphers) in advance.
52
-
49
+
> [!NOTE]
50
+
> The `minTlsVersion` property is read-only and cannot be changed once your IoT Hub resource is created. It is therefore essential that you properly test and validate that *all* your IoT devices and services are compatible with TLS 1.2 and the [recommended ciphers](#recommended-ciphers) in advance.
53
51
54
52
### Supported regions
55
53
@@ -62,8 +60,6 @@ IoT Hubs that require the use of TLS 1.2 can be created in the following regions
62
60
> [!NOTE]
63
61
> Upon failovers, the `minTlsVersion` property of your IoT Hub will remain effective in the geo-paired region post-failover.
64
62
65
-
66
-
67
63
### Recommended ciphers
68
64
69
65
IoT Hubs that are configured to accept only TLS 1.2 will also enforce the use of the following recommended ciphers:
@@ -73,7 +69,6 @@ IoT Hubs that are configured to accept only TLS 1.2 will also enforce the use of
73
69
*`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`
74
70
*`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`
75
71
76
-
77
72
### Use TLS 1.2 in your IoT Hub SDKs
78
73
79
74
Use the links below to configure TLS 1.2 and allowed ciphers in IoT Hub client SDKs.
Copy file name to clipboardExpand all lines: includes/iot-secure-your-deployment.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -72,7 +72,7 @@ While establishing a secure TLS connection with IoT Hub, the IoT device authenti
72
72
73
73
## Securing the connection
74
74
75
-
Internet connection between the IoT device and IoT Hub is secured using the Transport Layer Security (TLS) standard. Azure IoT supports [TLS 1.2](https://tools.ietf.org/html/rfc5246), TLS 1.1, and TLS 1.0, in this order. Support for TLS 1.0 is provided for backward compatibility only. If possible, [configure your hub](../articles/iot-hub/iot-hub-tls.md) to use TLS 1.2 as it provides the most security.
75
+
Internet connection between the IoT device and IoT Hub is secured using the Transport Layer Security (TLS) standard. Azure IoT supports [TLS 1.2](https://tools.ietf.org/html/rfc5246), TLS 1.1, and TLS 1.0, in this order. Support for TLS 1.0 is provided for backward compatibility only. Check [TLS support in IoT Hub](../articles/iot-hub/iot-hub-tls-support.md) to see how to configure your hub to use TLS 1.2, as it provides the most security.
0 commit comments