Skip to content

tls-1-3.md

Latest commit

 

History

History
66 lines (48 loc) · 3.28 KB

tls-1-3.md

File metadata and controls

66 lines (48 loc) · 3.28 KB
title TLS 1.3 support
description This article discusses TLS 1.3 support with SQL Server 2022 and Azure SQL Database.
author srdan-bozovic-msft
ms.author srbozovi
ms.date 08/15/2025
ms.service sql
ms.subservice security
ms.topic conceptual
monikerRange >=sql-server-ver16 || =azuresqldb-current|| >=sql-server-linux-ver16

TLS 1.3 support

[!INCLUDE SQL Server 2022] [!INCLUDEAzure SQL Database]

[!INCLUDE ssnoversion-md] (Beginning with [!INCLUDE sssql22-md]), and Azure SQL Database support Transport Layer Security (TLS) 1.3 when TDS 8.0 is used.

Important

Even with TLS 1.3 support for TDS connections, TLS 1.2 is still required for starting up [!INCLUDE ssnoversion-md] satellite services. Don't disable TLS 1.2 on the machine.

[!INCLUDE sssql19-md] and earlier versions don't support TLS 1.3.

Differences between TLS 1.2 and TLS 1.3

TLS 1.3 reduces the number of round trips from two to one during the handshake phase, making it faster and more secure than TLS 1.2. The server hello packet containing server certificate is encrypted and one Round Trip Time (1-RTT) resumption is discontinued, and replaced with 0-RTT resumption based on client key share. Added security of TLS 1.3 comes from discontinuing certain cyphers and algorithms.

Here's a list of algorithms and ciphers removed in TLS 1.3:

  • RC4 stream cipher
  • RSA key exchange
  • SHA-1 hash function
  • CBC (block) mode ciphers
  • MD5 algorithm
  • Various non-ephemeral Diffie-Hellman groups
  • EXPORT-strength ciphers
  • DES
  • 3DES

Driver support

Review the Driver feature support matrix to determine what drivers currently support TLS 1.3.

Operating system support

Currently, the following operating systems support TLS 1.3:

SQL Server 2025 support

[!INCLUDE sssql25-md] introduces TLS 1.3 support for the following features:

Related content