---
slug: "azure-app-service-tls-1-0-and-tls-1-1-retirement"
title: "Azure App Service, Functions and Logic Apps: TLS 1.0 and 1.1 retirement"
summary: "After 31 May 2027, Azure App Service, Azure Functions, and Azure Logic Apps no longer accept connections that use TLS 1.0 or TLS 1.1. Clients need to support TLS 1.2 or later."
cloud: "azure"
service: "Azure App Service"
service_slug: "app-service"
category: "feature"
type: "retirement"
announced_date: "2026-05-21"
effective_date: "2027-05-31"
effective_precision: "day"
replacement: "TLS 1.2 or later"
affected_versions: ["1.0","1.1"]
source_url: "https://azure.microsoft.com/updates?id=557852"
extra_source_urls: ["https://aka.ms/ServicesRetirementWorkbook","https://aka.ms/tls-deprecation-appservice","https://aka.ms/tls-deprecation-appservice/qa","https://aka.ms/tls-deprecation-functions/qa","https://aka.ms/tls-deprecation-logicapps/qa"]
vendor_ref: "557852"
last_checked_at: "2026-11-12T09:55:19.345Z"
created_at: "2026-11-13T13:36:44.208Z"
updated_at: "2026-11-13T13:36:44.208Z"
url: "https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement"
short_url: "https://eolwatch.dev/i/65"
markdown_url: "https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement.md"
json_url: "https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement.json"
source_note: null
---

# Azure App Service, Functions and Logic Apps: TLS 1.0 and 1.1 retirement

After 31 May 2027, Azure App Service, Azure Functions, and Azure Logic Apps no longer accept connections that use TLS 1.0 or TLS 1.1. Clients need to support TLS 1.2 or later.

- Effective date: 31 May 2027
- Cloud: [Azure](https://eolwatch.dev/cloud/azure.md)
- Service: [Azure App Service](https://eolwatch.dev/services/azure/app-service.md)
- Type: Retirement
- Category: [Feature](https://eolwatch.dev/categories/features.md)
- Affected versions: 1.0, 1.1
- Replacement: TLS 1.2 or later
- Announced: 21 May 2026
- Official source: [azure.microsoft.com](https://azure.microsoft.com/updates?id=557852)
- Last checked: 12 Nov 2026

## What breaks

After 31 May 2027, Azure App Service, Azure Functions, and Azure Logic Apps no longer accept connections that use TLS 1.0 or TLS 1.1. Any client, application, or service that still uses these TLS versions is unable to connect to these services after that date. Resources in a subscription that still allow TLS 1.0 or 1.1 are listed in the Azure Retirement Workbook.

## Who is affected

### Affected versions

- `1.0`
- `1.1`

### Matching resource types

- `microsoft.web/sites`
- `azurerm_linux_web_app`
- `azurerm_windows_web_app`
- `azurerm_linux_function_app`
- `azurerm_windows_function_app`

### Fields the check reads

- `properties.siteconfig.mintlsversion`
- `site_config.minimum_tls_version`

### Detected by the estate check from

- Terraform state or plan (JSON)
- ARM template

## What to do

1. Find the resources in your subscription that still allow TLS 1.0 or 1.1 in the [Azure Retirement Workbook](https://aka.ms/ServicesRetirementWorkbook).
2. Review the applications and services that connect to App Service, Functions, or Logic Apps and make sure they support TLS 1.2 or later before the retirement date.
3. Test client compatibility with TLS 1.2 or later.
4. Review the [TLS version deprecation overview](https://aka.ms/tls-deprecation-appservice) for configuration guidance.
5. For common questions, see the Q&A for [App Service](https://aka.ms/tls-deprecation-appservice/qa), [Functions](https://aka.ms/tls-deprecation-functions/qa) and [Logic Apps](https://aka.ms/tls-deprecation-logicapps/qa).

## Replacement

TLS 1.2 or later

## Sources

- [Official source](https://azure.microsoft.com/updates?id=557852) (azure.microsoft.com, Official)
- [Additional source](https://aka.ms/ServicesRetirementWorkbook) (aka.ms, Official)
- [Additional source](https://aka.ms/tls-deprecation-appservice) (aka.ms, Official)
- [Additional source](https://aka.ms/tls-deprecation-appservice/qa) (aka.ms, Official)
- [Additional source](https://aka.ms/tls-deprecation-functions/qa) (aka.ms, Official)
- [Additional source](https://aka.ms/tls-deprecation-logicapps/qa) (aka.ms, Official)

Last checked against the first source in this list on 12 Nov 2026.

Page: https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement | JSON: https://eolwatch.dev/items/azure-app-service-tls-1-0-and-tls-1-1-retirement.json

The text on this page is drafted with AI assistance from the vendor's text, checked against the official source and approved by a person before it is published.