When will TLS v1.3 feature be made available on Azure APIM

Ashish Thorat 1 Reputation point
2025-08-06T09:12:40.1566667+00:00

We have Azure APIM with 'Premium' tier for Prod and NonProd environments.

The Protocols + ciphers section in APIM, is only listing TLS 1.0, 1.1, 1.2 and SSL 3.0 for backend protocol and Client protocol.

I could find below 2 pages which mention discussion about TLS 1.3 on APIM.
https://techcommunity.microsoft.com/blog/integrationsonazureblog/announcing-the-availability-of-tls-1-3-in-azure-api-management-in-preview/4047586
https://learn.microsoft.com/en-us/answers/questions/2124159/when-will-azure-api-management-support-tls-1-3-bot?page=1&orderby=helpful&translated=false

Also the Microsoft documentation has mentions of TLS v1.2 and nothing about TLS v1.3
https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-manage-protocols-ciphers

So I wanted to know when will the TLS v1.3 feature be made available on Azure APIM in premium tier.

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Alex Burlachenko 13,330 Reputation points Volunteer Moderator
    2025-08-06T09:35:16.3566667+00:00

    Ashish Thorat hi, thanks for bringing this up ))

    so about tls 1.3 in azure api management premium tier... right now it's still in preview, according to this blog post https://techcommunity.microsoft.com/blog/integrationsonazureblog/announcing-the-availability-of-tls-1-3-in-azure-api-management-in-preview/4047586. microsoft hasn't given an exact date for general availability yet, but they're working on it https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-manage-protocols-ciphers for updates.

    as for why u don't see it in the protocols + ciphers section... well, preview features sometimes roll out bit by bit. if u really need tls 1.3 now, u might wanna try enabling the preview in ur subscription. just keep in mind preview features aren't meant for production workloads, so maybe wait for the stable release if ur dealing with critical stuff.

    even if apim doesn't fully support tls 1.3 yet, ur backend services might. u could configure them separately and let apim handle the traffic. worth looking into, no?

    while waiting for tls 1.3, make sure ur current tls 1.2 setup is rock solid. disable the older protocols like tls 1.0 and 1.1 if u haven't already. this might help in other tools too, not just apim.

    if u wanna get fancy, u can play around with custom policies in apim to tweak security further. microsoft's got some examples here https://learn.microsoft.com/en-us/azure/api-management/api-management-sample-flexible-throttling. not exactly tls related, but hey, security is security ))

    let me know if thats help

    Alex

    and "yes" if you would follow me at Q&A - personaly thx.
    P.S. If my answer help to you, please Accept my answer
    

    https://ctrlaltdel.blog/

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.