Microsoft

Deprecating weak cryptographic standards (TLS 1.0 and 1.1) in Azure DevOps Services

Mar 15, 2022Mark Graham
Deprecating weak cryptographic standards (TLS 1.0 and 1.1) in Azure DevOps Services
SummaryAI, from the source post

This post announces the completion of the deprecation of TLS 1.0 and 1.1 for Azure DevOps Services (dev.azure.com and *.visualstudio.com domains), enforcing TLS 1.2 for all HTTPS connections. It details a partial rollback due to unexpected issues on January 31st, 2022, and outlines the final rollout starting March 31, 2022. Temporary 12-hour downtimes were scheduled for March 22nd and 24th, 2022, to help customers identify incompatible software. Guidance is provided on enabling TLS 1.2 for self-hosted agents and API calls, including checks for Windows Server versions, .NET Framework installations, and required cipher suites. Manual PowerShell checks, YAML pipeline steps, and a dedicated pipeline task are offered for compatibility testing. A troubleshooting script for common misconfigurations is also shared on GitHub.

More from the NTLM Removal in Git (libcurl) for Azure DevOps Server trail