Cache Remove Tls 10 11 - Document Details

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.

View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types

powershell_heavy

missing_linux_example

windows_tools

windows_first

Summary

The documentation page demonstrates a Windows bias by providing only PowerShell scripts and commands for checking and configuring TLS settings, with no equivalent Linux/bash examples. The instructions and scripts assume a Windows environment, and there is no mention of Linux tools or cross-platform alternatives. The Azure portal UI instructions are platform-neutral, but all command-line automation is Windows-centric.

Recommendations

Provide bash or Azure CLI examples for checking TLS versions from Linux/macOS environments, such as using openssl s_client or curl.
Include cross-platform Azure CLI commands for configuring the Minimum TLS version, and clarify any limitations or alternatives for Linux users.
Mention and demonstrate how to perform TLS checks using common Linux tools (e.g., openssl) alongside PowerShell.
Order examples so that platform-neutral or cross-platform solutions (like Azure CLI or REST API) are presented before or alongside Windows/PowerShell-specific ones.
Explicitly state when a script or command is Windows-only, and provide equivalent steps for Linux users.

Create Pull Request

Scan History

Date	Scan	Status	Result
2026-01-12 00:00	#99	completed	Biased
2026-01-11 06:20	#98	completed	Biased
2026-01-11 00:00	#95	cancelled	Clean
2026-01-10 00:00	#92	completed	Clean
2026-01-09 00:00	#87	cancelled	Clean
2026-01-06 22:28	#78	completed	Clean
2025-12-29 18:00	#48	cancelled	Biased
2025-12-15 00:00	#7	completed	Clean
2025-12-14 05:05	#6	completed	Clean

Flagged Code Snippets

    param(
    [Parameter(Mandatory=$true)]
    [string]$redisCacheName,
    [Parameter(Mandatory=$false)]
    [string]$dnsSuffix = ".redis.cache.windows.net",
    [Parameter(Mandatory=$false)]
    [int]$connectionPort = 6380,
    [Parameter(Mandatory=$false)]
    [int]$timeoutMS = 2000
    )
    $redisEndpoint = "$redisCacheName$dnsSuffix"
    $protocols = @(
        [System.Security.Authentication.SslProtocols]::Tls,
        [System.Security.Authentication.SslProtocols]::Tls11,
        [System.Security.Authentication.SslProtocols]::Tls12
    )
    $protocols | % {
        $ver = $_
        $tcpClientSocket = New-Object Net.Sockets.TcpClient($redisEndpoint, $connectionPort )
        if(!$tcpClientSocket)
        {
            Write-Error "$ver- Error Opening Connection: $port on $computername Unreachable"
            exit 1;
        }
        else
        {
            $tcpstream = $tcpClientSocket.GetStream()
            $sslStream = New-Object System.Net.Security.SslStream($tcpstream,$false)
            $sslStream.ReadTimeout = $timeoutMS
            $sslStream.WriteTimeout = $timeoutMS
            try
            {
                $sslStream.AuthenticateAsClient($redisEndpoint, $null, $ver, $false)
                Write-Host "$ver Enabled"
            }
            catch [System.IO.IOException]
            {
                $null = $_
                #Write-Host "$ver Disabled"
            }
            catch
            {
                $null = $_
                #Write-Error "Unexpected exception $_"
            }
        }
    }

   Set-AzRedisCache -Name <YourRedisCacheName> -MinimumTlsVersion "1.2"