{
  "slug": "azure-app-service-tls-1-0-and-tls-1-1-retirement",
  "title": "Azure App Service, Functions and Logic Apps: TLS 1.0 and 1.1 retirement",
  "summary": "After 31 May 2027, Azure App Service, Azure Functions, and Azure Logic Apps no longer accept connections that use TLS 1.0 or TLS 1.1. Clients need to support TLS 1.2 or later.",
  "cloud": "azure",
  "service": "Azure App Service",
  "service_slug": "app-service",
  "category": "feature",
  "type": "retirement",
  "announced_date": "2026-05-21",
  "effective_date": "2027-05-31",
  "effective_precision": "day",
  "impact": "After 31 May 2027, Azure App Service, Azure Functions, and Azure Logic Apps no longer accept connections that use TLS 1.0 or TLS 1.1. Any client, application, or service that still uses these TLS versions is unable to connect to these services after that date. Resources in a subscription that still allow TLS 1.0 or 1.1 are listed in the Azure Retirement Workbook.",
  "migration_path": "1. Find the resources in your subscription that still allow TLS 1.0 or 1.1 in the [Azure Retirement Workbook](https://aka.ms/ServicesRetirementWorkbook).\n2. Review the applications and services that connect to App Service, Functions, or Logic Apps and make sure they support TLS 1.2 or later before the retirement date.\n3. Test client compatibility with TLS 1.2 or later.\n4. Review the [TLS version deprecation overview](https://aka.ms/tls-deprecation-appservice) for configuration guidance.\n5. For common questions, see the Q&A for [App Service](https://aka.ms/tls-deprecation-appservice/qa), [Functions](https://aka.ms/tls-deprecation-functions/qa) and [Logic Apps](https://aka.ms/tls-deprecation-logicapps/qa).",
  "replacement": "TLS 1.2 or later",
  "affected_versions": [
    "1.0",
    "1.1"
  ],
  "source_url": "https://azure.microsoft.com/updates?id=557852",
  "extra_source_urls": [
    "https://aka.ms/ServicesRetirementWorkbook",
    "https://aka.ms/tls-deprecation-appservice",
    "https://aka.ms/tls-deprecation-appservice/qa",
    "https://aka.ms/tls-deprecation-functions/qa",
    "https://aka.ms/tls-deprecation-logicapps/qa"
  ],
  "vendor_ref": "557852",
  "last_checked_at": "2026-11-12T09:55:19.345Z",
  "created_at": "2026-11-13T13:36:44.208Z",
  "updated_at": "2026-11-13T13:36:44.208Z",
  "url": "https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement",
  "short_url": "https://eolwatch.dev/i/65",
  "markdown_url": "https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement.md",
  "json_url": "https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement.json",
  "estate_check": {
    "resource_types": [
      "microsoft.web/sites",
      "azurerm_linux_web_app",
      "azurerm_windows_web_app",
      "azurerm_linux_function_app",
      "azurerm_windows_function_app"
    ],
    "fields": [
      "properties.siteconfig.mintlsversion",
      "site_config.minimum_tls_version"
    ],
    "inputs": [
      "Terraform state or plan (JSON)",
      "ARM template"
    ]
  },
  "source_note": null
}