End of SSH-RSA support for Azure Repos
Feb 15, 2024Bohdan Janousek

Summary
Announces the deprecation and phased removal of SSH-RSA support for SSH connections to Azure Repos. Details the technical rationale (weak encryption), provides a four-phase rollout plan for Azure DevOps Service with specific timelines and error messages, and outlines the impact and migration steps for Azure DevOps Server users. Introduces RSA-SHA2-256 and RSA-SHA2-512 as secure alternatives and provides instructions for generating and configuring new keys.
More from the NTLM Removal in Git (libcurl) for Azure DevOps Server trail
- Upcoming Change: NTLM Removal in Git (libcurl) – Impact to Azure DevOps Server Customers
- End of Support for Microsoft products reliant on older Azure DevOps and Visual Studio authentication
- August patches for Azure DevOps Server
- Reconfigure Azure DevOps Server to use Kerberos instead of NTLM
- Deprecating weak cryptographic standards (TLS 1.0 and 1.1) in Azure DevOps Services