I recently got an email from Microsoft regarding the TLS Certificate changes. Had some difficulty understanding few action steps regarding it. Can anyone please explain the below points in detail.
Would be a massive help!
I recently got an email from Microsoft regarding the TLS Certificate changes. Had some difficulty understanding few action steps regarding it. Can anyone please explain the below points in detail.
Would be a massive help!
Copyright © 2021 Jogjafile Inc.
The TLS Change would apply to anyone who is trying to communicate to Azure services with their application. This is for applications/services etc. which call any Azure endpoint for execution. While calling the Azure endpoint the clients are required to present the certificate and trust the ones provided by Azure during the secure communications (a step called SSL handshake) between both the parties. In this case, the application needs to trust the Certificate authorities which granted the Azure service/endpoints the certificates so the certificate-based errors do not come during any secure communication between the application and Azure endpoints. Your application may be impacted if it explicitly specifies a list of acceptable CAs. This practice is known as certificate pinning.
There are some ways to detect if your application is impacted. You can follow the below article to find out more information:
https://learn.microsoft.com/en-us/azure/security/fundamentals/tls-certificate-changes#will-this-change-affect-me
https://azure.microsoft.com/en-us/updates/site-recovery-tls-certificate-update/
If you have any specific question, you can post the same in the below thread which is being continuously monitored for Azure TLS certificate questions: https://learn.microsoft.com/en-us/answers/questions/117444/reminder-azure-tls-certificate-changes.html