{"id":236435,"date":"2022-01-28T10:36:54","date_gmt":"2022-01-28T18:36:54","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/visualstudio\/?p=236435"},"modified":"2022-03-17T13:33:33","modified_gmt":"2022-03-17T20:33:33","slug":"azure-devops-requires-tls-1-2-on-all-connections-including-visual-studio","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/visualstudio\/azure-devops-requires-tls-1-2-on-all-connections-including-visual-studio\/","title":{"rendered":"Azure DevOps requires TLS 1.2 on all connections including Visual Studio"},"content":{"rendered":"<p><div class=\"alert alert-primary\"><p class=\"alert-divider\"><i class=\"fabric-icon fabric-icon--Info\"><\/i><strong>Permanent rollout of TLS 1.0\/1.1 deprecation starts on March 31, 2022<\/strong><\/p> Azure DevOps has provided new guidance and timelines for the TLS 1.0\/1.1 deprecation.<\/p>\n<p>While the permanent rollout will start on <strong>March 31, 2022, <\/strong>the team plans to temporarily disable support twice during March to help customers identify potential issues before the permanent rollout takes place.<\/p>\n<p>Please review their <a href=\"https:\/\/devblogs.microsoft.com\/devops\/deprecating-weak-cryptographic-standards-tls-1-0-and-1-1-in-azure-devops-services\/\">new blog post<\/a> for full details. <\/div><\/p>\n<p><div class=\"alert alert-primary\"><p class=\"alert-divider\"><i class=\"fabric-icon fabric-icon--Info\"><\/i><strong>TLS 1.0\/1.1 deprecation change rolled back<\/strong><\/p>The Azure DevOps team rolled back the change it made on Jan 31st, 2022, to deprecate support for older versions of TLS (1.0\/1.1) due to unexpected issues. For now, Azure DevOps continues to support calls made over TLS 1.0\/1.1. Their team is working on a plan to address the issues and will announce a new deprecation date soon.<\/div><\/p>\n<p>Starting Monday January 31<sup>st<\/sup>, <a href=\"https:\/\/devblogs.microsoft.com\/devops\/deprecating-weak-cryptographic-standards-tls-1-0-and-tls-1-1-in-azure-devops\/\">Azure DevOps will no longer accept connections coming over TLS 1.0 and 1.1<\/a> due to security vulnerabilities in those protocols. Developers have increasingly become the target of hackers and these protocols have known security vulnerabilities not specific to Microsoft\u2019s implementation. Going forward Azure DevOps will require TLS 1.2 for all HTTPS connections, including their web API and Git services. To avoid any issues, please <a href=\"https:\/\/visualstudio.microsoft.com\/downloads\/\">upgrade to the latest version of Visual Studio<\/a>.<\/p>\n<p>Visual Studio 2022, Visual Studio 2019, and the latest release of Visual Studio 2017 (version 15.9 and beyond) already use TLS 1.2 and are not impacted by the upcoming change. Earlier versions of Visual Studio that are running on devices not configured to use TLS 1.2, may begin to see errors when connecting to Azure DevOps services. Features such as signing into Visual Studio, unlocking the IDE, and remote Git operations could be affected.<\/p>\n<p>Some of the error messages may include:<\/p>\n<p><code>fatal:\u00a0HttpRequestException\u00a0encountered.\u00a0An\u00a0error occurred\u00a0while\u00a0sending the request.\u00a0while\u00a0fetching\u00a0or\u00a0pushing to a\u00a0Git\u00a0repository.\n<\/code><\/p>\n<p><code>error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version<\/code><\/p>\n<h2><\/h2>\n<h2>How to enable TLS 1.2<\/h2>\n<p>The easiest way to avoid these issues is to <a href=\"https:\/\/visualstudio.microsoft.com\/downloads\/\">upgrade to the latest version of Visual Studio<\/a> as it already uses TLS 1.2 for all HTTPS connections. If upgrading Visual Studio is not an option, you can <a href=\"https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/azure\/active-directory\/enable-support-tls-environment?tabs=azure-monitor&quot; \\l &quot;registry-strings\">set a set a machine-wide registry key to enable TLS 1.2<\/a> on all .NET applications including Visual Studio. Last, you can also install the latest Git for Windows tools that also use TLS 1.2.<\/p>\n<p>The <a href=\"https:\/\/devblogs.microsoft.com\/devops\/deprecating-weak-cryptographic-standards-tls-1-0-and-tls-1-1-in-azure-devops\/\">Azure DevOps blog<\/a> has more information on the upcoming TLS changes. You can also read more about the <a href=\"https:\/\/datatracker.ietf.org\/doc\/rfc8996\/\">official depreciation of TLS 1.0 and 1.1<\/a> in the IETF Data Tracker.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Starting Monday January 31st, Azure DevOps will no longer accept connections coming over TLS 1.0 and 1.1 due to security vulnerabilities in those protocols. Developers have increasingly become the target of hackers and these protocols have known security vulnerabilities not specific to Microsoft\u2019s implementation. Going forward Azure DevOps will require TLS 1.2 for all HTTPS [&hellip;]<\/p>\n","protected":false},"author":1092,"featured_media":228872,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1412,155],"tags":[1396,202,126,196],"class_list":["post-236435","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-development","category-visual-studio","tag-azure-devops","tag-visual-studio-2012","tag-visual-studio-2013","tag-visual-studio-2015"],"acf":[],"blog_post_summary":"<p>Starting Monday January 31st, Azure DevOps will no longer accept connections coming over TLS 1.0 and 1.1 due to security vulnerabilities in those protocols. Developers have increasingly become the target of hackers and these protocols have known security vulnerabilities not specific to Microsoft\u2019s implementation. Going forward Azure DevOps will require TLS 1.2 for all HTTPS [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/posts\/236435","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/users\/1092"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/comments?post=236435"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/posts\/236435\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/media\/228872"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/media?parent=236435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/categories?post=236435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/visualstudio\/wp-json\/wp\/v2\/tags?post=236435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}