Skip to content

Commit 7444992

Browse files
authored
Merge pull request #107210 from rohitnayakmsft/mar12changes2
Rollback docs on minimal TLS version
2 parents 7dab970 + 81d9deb commit 7444992

File tree

2 files changed

+0
-43
lines changed

2 files changed

+0
-43
lines changed
-182 KB
Loading

articles/sql-database/sql-database-connectivity-settings.md

Lines changed: 0 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -72,49 +72,6 @@ az sql server update -n sql-server-name -g sql-server-group --set publicNetworkA
7272
7373
```
7474

75-
## Minimal TLS Version
76-
Minimal TLS Version allows customer to control the version of [Transport Layer Security](https://support.microsoft.com/help/3135244/tls-1-2-support-for-microsoft-sql-server) for their Azure SQL Server.
77-
78-
We recommend setting Minimal TLS version to 1.2. For customers with applications that rely on older version of TLS, we recommend setting the Minimal TLS version per the requirements of your applications. For customers that rely on applications to connect using an unencrypted connection, we recommend not setting any Minimal TLS Version. For additional information, refer to [TLS considerations for SQL Database connectivity](sql-database-connect-query.md#tls-considerations-for-sql-database-connectivity).
79-
80-
After setting Minimal TLS version, login attempts from clients that are using a TLS version less than the Minimal TLS version of the server will fail with following error:
81-
82-
```output
83-
Error 47072
84-
Login failed with invalid TLS version
85-
```
86-
87-
## Set Minimal TLS Version via PowerShell
88-
[!INCLUDE [updated-for-az](../../includes/updated-for-az.md)]
89-
> [!IMPORTANT]
90-
> The PowerShell Azure Resource Manager module is still supported by Azure SQL Database, but all future development is for the Az.Sql module. For these cmdlets, see [AzureRM.Sql](https://docs.microsoft.com/powershell/module/AzureRM.Sql/). The arguments for the commands in the Az module and in the AzureRm modules are substantially identical. The following script requires the [Azure PowerShell module](/powershell/azure/install-az-ps).
91-
92-
The following PowerShell script shows how to `Get` and `Set` the **Minimal TLS Version** property at the logical server level:
93-
94-
```powershell
95-
#Get the Public Network Access property
96-
(Get-AzSqlServer -ServerName sql-server-name -ResourceGroupName sql-server-group).PublicNetworkAccess
97-
98-
# Update Public Network Access to Disabled
99-
$SecureString = ConvertTo-SecureString "password" -AsPlainText -Force
100-
101-
Set-AzSqlServer -ServerName sql-server-name -ResourceGroupName sql-server-group -SqlAdministratorPassword $SecureString -MinimalTlsVersion "1.2"
102-
```
103-
104-
## Set Minimal TLS Version via Azure CLI
105-
> [!IMPORTANT]
106-
> All scripts in this section requires [Azure CLI](https://docs.microsoft.com/cli/azure/install-azure-cli).
107-
108-
### Azure CLI in a bash shell
109-
The following CLI script shows how to change the **Minimal TLS Version** setting in a bash shell:
110-
111-
```azurecli-interactive
112-
# Get current setting for Minimal TLS Version
113-
az sql server show -n sql-server-name -g sql-server-group --query "minimalTlsVersion"
114-
115-
# Update setting for Minimal TLS Version
116-
az sql server update -n sql-server-name -g sql-server-group --set minimalTlsVersion="1.2"
117-
```
11875

11976
## Connection policy
12077
[Connection policy](sql-database-connectivity-architecture.md#connection-policy) determines how clients connect to Azure SQL Server.

0 commit comments

Comments
 (0)