Azure updates

Minimal TLS version setting is now available for Azure Database for MariaDB

Enforce a minimal TLS version at the server level that applies to Azure Database for MariaDB using the new TLS version setting.

• Azure Database for MariaDB
• Compliance
• Features
• Open Source
• Security

Minimal TLS version setting is now available for Azure Database for PostgreSQL

Enforce a minimal TLS version at the server level that applies to Azure Database for PostgreSQL using the new TLS version setting.

• Azure Database for PostgreSQL
• Compliance
• Features
• Open Source
• Security

Minimal TLS version setting is now available for Azure Database for MySQL

Enforce a minimal transport layer security (TLS) version at the server level that applies to Azure Database for MySQL using the new TLS version setting.

• Azure Database for MySQL
• Compliance
• Features
• Open Source
• Security

CNI security vulnerability in older AKS clusters and mitigation steps

Find out if you are impacted by an identified CNI vulnerability in older AKS clusters and take mitigation steps to address it.

• Security

Azure HDInsight enterprise security enhancements

Three new security feature improvements are available for Azure HDinsight.

• HDInsight
• Features
• Microsoft Build
• Security

Azure HDInsight enterprise security enhancements

Target availability: Q2 2020

Azure HDInsight enterprise security enhancements include support for customer-managed key encryption with Azure Key Vault and a new feature, ID broker, which simplifies authentication setups.

• HDInsight
• Features
• Microsoft Build
• Security

Azure Automation TLS 1.2 enforcement begins September 1, 2020

Beginning September 1, 2020, Azure Automation will enforce transport layer security (TLS) 1.2 or later versions for all external HTTPS endpoints. We recommend you ensure all your clients are ready to handle TLS 1.2 or later versions.

• Security

Azure File Sync is removing support for TLS 1.0 and 1.1 in August 2020

Target retirement date: August 01, 2020

Azure File Sync service will remove support for TLS 1.0 and 1.1 in August 2020.

• File Storage
• Retirements

Azure Sphere update 20.04 is now available

The 20.04 release of Azure Sphere OS includes new features to support EAP-TLS networking and certificate management. A single Windows SDK now supports both Visual Studio and Visual Studio Code.

• Azure Sphere
• Operating System
• SDK and Tools

Update self-hosted integration runtime nodes to TLS 1.2 by May 11, 2020

Target availability: Q2 2020

Update your servers/machines running self-hosted integration runtimes that communicate with the Azure Data Factory backend for control plane actions to use transport layer security (TLS) 1.2 by May 11, 2020.

• Data Factory
• Compliance
• Security

Upgrade the TLS version of your Power BI application to TLS 1.2

Support for transport layer security (TLS) 1.0 and 1.1 for Power BI will end in June 2020. Upgrade the TLS version of your Power BI application to TLS 1.2 before then.

• Power BI Embedded
• SDK and Tools
• Security

Azure SQL Database managed instance now enforces TLS 1.2 on outbound connections

Target availability: Q1 2020

In January 2020 Microsoft enforced TLS 1.2 for intra-service traffic in all Azure services. For Azure SQL Database managed instance, this resulted in TLS 1.2 being enforced on outbound connections used for replication and linked server connections to SQL Server.

• Azure SQL Database
• Compliance
• Security

Preparing for TLS 1.2 in Microsoft Azure

Microsoft Azure recommends all customers complete migration towards solutions that support transport layer security (TLS) 1.2 and to make sure that TLS 1.2 is used by default.

• Compliance
• Retirements
• Security

Azure HDInsight TLS 1.2 Enforcement

Target availability: Q1 2020

Starting on June 30, 2020, Azure HDInsight will enforce TLS 1.2 or later versions for all HTTPS connections. We recommend that you ensure that all your clients are ready to handle TLS 1.2 or later versions.

• HDInsight
• Security