How to rollback the upgrade of the minimum TLS version from 1.0 to 1.2 in Cosmos DB

Datto De los rios, Jorge Antonio 20 Reputation points
2025-04-21T15:04:58.7833333+00:00

We are planning the upgrade of the minimum TLS version from 1.0 to 1.2 in our Cosmos DB resources.

As part of this planning we need to try the rollback to TLS 1.0 in case we have problems with the applications. But I haven´t found an option in the azure portal, nor from power shell.

Is it possible the rollback to TLS 1.0 after the upgrade to TLS 1.2, and how could I do it ?

Thanks for your answers.

Azure Cosmos DB
Azure Cosmos DB
An Azure NoSQL database service for app development.
1,843 questions
0 comments No comments
{count} votes

Accepted answer
  1. Saraswathi Devadula 1,945 Reputation points Microsoft External Staff
    2025-04-21T15:41:03.2766667+00:00

    Hello Datto De los rios, Jorge Antonio

    I understand that you want to know whether you can roll back the version from 1.2 to 1.0 or not.

    Please be informed that Azure Cosmos DB enforces a minimum TLS version for security reasons, and currently, the service-wide accepted version is TLS 1.2. Starting August 31, 2025, support for TLS 1.0 and 1.1 will be discontinued. If your account has been upgraded to TLS 1.2, rolling back to TLS 1.0 is not supported due to these security policies.

    Kindly please refer the below document,
    https://azure.microsoft.com/en-us/updates?id=update-retirement-tls1-0-tls1-1-versions-azure-services

    You can also get the current value of the minimalTlsVersion property by using Azure CLI or Azure PowerShell.

    Get current value via Azure CLI

    To get the current value of the property using Azure CLI, run the command:

    subId=$(az account show --query id -o tsv)
    rg="myresourcegroup"
    dbName="mycosmosdbaccount"
    az rest --uri "/subscriptions/$subId/resourceGroups/$rg/providers/Microsoft.DocumentDB/databaseAccounts/$dbName?api-version=2022-11-15" --method GET
    

    Get current value via Azure PowerShell

    To get the current value of the property using Azure PowerShell, run the command:

    Get-AzCosmosDBAccount -ResourceGroupName myresourcegroup -Name mycosmosdbaccount
    

    https://learn.microsoft.com/en-us/azure/cosmos-db/self-serve-minimum-tls-enforcement#how-to-verify-minimum-tls-version-enforcement

    Please do let me know if you have any further concerns. I am happy to address.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.