How can I get a list of all the affected resources and applications that are not set to TLS 1.2?

ypon zairo 20 Reputation points
2025-08-06T01:38:52.65+00:00

TLS 1.0 and 1.1 will soon be deprecated. Therefore, before enabling the TLS 1.2 only mode I would like to know what are the affected resources and applications that are not set to TLS 1.2.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
{count} votes

Accepted answer
  1. Naveena Patlolla 4,805 Reputation points Microsoft External Staff Moderator
    2025-08-06T04:55:44.2966667+00:00

    Hi ypon zairo

    To identify resources that may still be using TLS 1.0 or 1.1, you can utilize the following KQL (Kusto Query Language) query in Azure Resource Graph Explorer:

    resources | where isnotnull(properties['minimumTlsVersion']) | project name, type,resourceGroup, properties.minimumTlsVersion  
    

    reference example:

    User's image

    If any resources are configured to use TLS 1.0 or 1.1, update their settings to enforce TLS 1.2 or later. Before making changes, ensure that your applications and services are compatible with TLS 1.2 or later. This includes verifying that all client applications, libraries, and operating systems support the newer TLS versions.

    Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.