Skip to content

Commit 6390ec1

Browse files
authored
Merge pull request #101617 from robinsh/robinsh-0117
Rename TLS files and add redirects for them.
2 parents 52e3c14 + 244c78e commit 6390ec1

File tree

5 files changed

+22
-17
lines changed

5 files changed

+22
-17
lines changed

.openpublishing.redirection.json

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1746,6 +1746,16 @@
17461746
"redirect_url": "/azure/iot-hub/iot-hub-create-using-cli",
17471747
"redirect_document_id": true
17481748
},
1749+
{
1750+
"source_path": "articles/iot-hub/iot-hub-tls.md",
1751+
"redirect_url": "/azure/iot-hub/iot-hub-tls-support",
1752+
"redirect_document_id": true
1753+
},
1754+
{
1755+
"source_path": "articles/iot-hub/tls-1.2-everywhere.md",
1756+
"redirect_url": "/azure/iot-hub/iot-hub-tls-deprecating-1-0-and-1-1",
1757+
"redirect_document_id": true
1758+
},
17491759
{
17501760
"source_path": "articles/cognitive-services/custom-decision-service/custom-decision-service-tutorial-analytics.md",
17511761
"redirect_url": "/azure/cognitive-services/custom-decision-service",

articles/iot-hub/TOC.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -84,9 +84,9 @@
8484
- name: Concepts
8585
items:
8686
- name: TLS support
87-
href: iot-hub-tls.md
87+
href: iot-hub-tls-support.md
8888
- name: TLS 1.0 and 1.1 deprecation
89-
href: tls-1.2-everywhere.md
89+
href: iot-hub-tls-deprecating-1-0-and-1-1.md
9090
- name: Message enrichments overview
9191
href: iot-hub-message-enrichments-overview.md
9292
- name: Overview of device management

articles/iot-hub/tls-1.2-everywhere.md renamed to articles/iot-hub/iot-hub-tls-deprecating-1-0-and-1-1.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
---
2-
title: Deprecation TLS 1.0 and 1.1 in IoT Hub and Device Provisioning Service (DPS) | Microsoft Docs
2+
title: Deprecating TLS 1.0 and 1.1 in IoT Hub and Device Provisioning Service (DPS) | Microsoft Docs
33
description: Guidelines regarding deprecation of TLS 1.0 and 1.1 and supported ciphers in IoT Hub and DPS.
4-
author: rezas
5-
ms.author: reza
4+
author: rezasherafat
5+
ms.author: rezas
66
ms.service: iot-hub
77
services: iot-hub
88
ms.topic: conceptual
99
ms.date: 12/16/2019
1010
---
1111

12-
# TLS 1.0 and 1.1 deprecation in IoT Hub and Device Provisioning Service
12+
# Deprecation of TLS 1.0 and 1.1 in IoT Hub and Device Provisioning Service
1313

1414
To provide best-in-class encryption, IoT Hub and Device Provisioning Service (DPS) are moving to Transport Layer Security (TLS) 1.2 as the encryption mechanism of choice for IoT devices and services. As such, legacy support for TLS 1.0 and TLS 1.1 as well as several non-recommended legacy ciphers will be deprecated in **July 1, 2020**.
1515

@@ -20,7 +20,7 @@ Based on customers' specific circumstances and configurations, deprecation of TL
2020

2121
## Supported ciphers
2222

23-
Only the following ciphers will be allowed during TLS handshake:
23+
Only the following ciphers are allowed during TLS handshake:
2424

2525
* TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
2626
* TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

articles/iot-hub/iot-hub-tls.md renamed to articles/iot-hub/iot-hub-tls-support.md

Lines changed: 4 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -7,19 +7,17 @@
77
ms.topic: conceptual
88
ms.date: 01/10/2020
99
ms.author: rezas
10-
ms.custom: Azure IoT Hub TLS
1110
---
1211

1312
# TLS support in IoT Hub
1413

1514
IoT Hub uses Transport Layer Security (TLS) to secure connections from IoT devices and services. Three versions of the TLS protocol are currently supported, namely versions 1.0, 1.1, and 1.2.
1615

17-
TLS 1.0 and 1.1 are considered legacy and are [planned for deprecation](./tls-1.2-everywhere.md). It is therefore strongly recommended to use TLS 1.2 as the preferred TLS version when connecting to IoT Hub.
18-
16+
TLS 1.0 and 1.1 are considered legacy and are planned for deprecation. For more information, see [Deprecating TLS 1.0 and 1.1 for IoT Hub](iot-hub-tls-deprecating-1-0-and-1-1.md). It is strongly recommended that you use TLS 1.2 as the preferred TLS version when connecting to IoT Hub.
1917

2018
## Restrict connections to TLS 1.2 in your IoT Hub resource
2119

22-
For added security, it is advised to configure your IoT Hubs to _only_ allow client connections that use TLS version 1.2 and to enforce the use of [recommended ciphers](#recommended-ciphers).
20+
For added security, it is advised to configure your IoT Hubs to *only* allow client connections that use TLS version 1.2 and to enforce the use of [recommended ciphers](#recommended-ciphers).
2321

2422
For this purpose, provision a new IoT Hub in any of the [supported regions](#supported-regions) and set the `minTlsVersion` property to `1.2` in your Azure Resource Manager template's IoT hub resource specification:
2523

@@ -48,8 +46,8 @@ For this purpose, provision a new IoT Hub in any of the [supported regions](#sup
4846

4947
The created IoT Hub resource using this configuration will refuse device and service clients that attempt to connect using TLS versions 1.0 and 1.1. Similarly, the TLS handshake will be refused if the client HELLO message does not list any of the [recommended ciphers](#recommended-ciphers).
5048

51-
Note that the `minTlsVersion` property is read-only and cannot be changed once your IoT Hub resource is created. It is therefore essential that you properly test and validate that _all_ your IoT devices and services are compatible with TLS 1.2 and the [recommended ciphers](#recommended-ciphers) in advance.
52-
49+
> [!NOTE]
50+
> The `minTlsVersion` property is read-only and cannot be changed once your IoT Hub resource is created. It is therefore essential that you properly test and validate that *all* your IoT devices and services are compatible with TLS 1.2 and the [recommended ciphers](#recommended-ciphers) in advance.
5351
5452
### Supported regions
5553

@@ -62,8 +60,6 @@ IoT Hubs that require the use of TLS 1.2 can be created in the following regions
6260
> [!NOTE]
6361
> Upon failovers, the `minTlsVersion` property of your IoT Hub will remain effective in the geo-paired region post-failover.
6462
65-
66-
6763
### Recommended ciphers
6864

6965
IoT Hubs that are configured to accept only TLS 1.2 will also enforce the use of the following recommended ciphers:
@@ -73,7 +69,6 @@ IoT Hubs that are configured to accept only TLS 1.2 will also enforce the use of
7369
* `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`
7470
* `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`
7571

76-
7772
### Use TLS 1.2 in your IoT Hub SDKs
7873

7974
Use the links below to configure TLS 1.2 and allowed ciphers in IoT Hub client SDKs.

includes/iot-secure-your-deployment.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ While establishing a secure TLS connection with IoT Hub, the IoT device authenti
7272

7373
## Securing the connection
7474

75-
Internet connection between the IoT device and IoT Hub is secured using the Transport Layer Security (TLS) standard. Azure IoT supports [TLS 1.2](https://tools.ietf.org/html/rfc5246), TLS 1.1, and TLS 1.0, in this order. Support for TLS 1.0 is provided for backward compatibility only. If possible, [configure your hub](../articles/iot-hub/iot-hub-tls.md) to use TLS 1.2 as it provides the most security.
75+
Internet connection between the IoT device and IoT Hub is secured using the Transport Layer Security (TLS) standard. Azure IoT supports [TLS 1.2](https://tools.ietf.org/html/rfc5246), TLS 1.1, and TLS 1.0, in this order. Support for TLS 1.0 is provided for backward compatibility only. Check [TLS support in IoT Hub](../articles/iot-hub/iot-hub-tls-support.md) to see how to configure your hub to use TLS 1.2, as it provides the most security.
7676

7777
## Securing the cloud
7878

0 commit comments

Comments
 (0)