Ensure TLS Version Is Set To TLSV1.2 For MySQL Flexible Database Server
More Info:
Ensure TLS version on MySQL flexible servers is set to the default value.Risk Level
MediumAddress
SecurityCompliance Standards
CISAZURE, CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Ensure TLS Version Is Set To TLSV1.2 For MySQL Flexible Database Server” for Azure using Azure console, please follow the below steps:
- Login to Azure portal (https://portal.azure.com/).
- Navigate to “Azure Database for MySQL Flexible Server” service.
- Select the “Flexible server” for which you want to remediate the misconfiguration.
- Under the “Settings” section, click on “Connection security”.
- Under the “Connection security” tab, select “TLS 1.2” from the “TLS version” drop-down list.
- Click on the “Save” button to save the changes.
Using CLI
Using CLI
To remediate the misconfiguration “Ensure TLS Version Is Set To TLSV1.2 For MySQL Flexible Database Server” for AZURE using AZURE CLI, you can follow the below steps:Step 1: Open the AZURE CLI and login to your account using the following command:Step 2: Once you are logged in, set the subscription where your MySQL Flexible Database Server is located using the following command:Step 3: Next, retrieve the resource ID of your MySQL Flexible Database Server using the following command:Replace Replace Replace
<server_name> with the name of your MySQL Flexible Database Server.Step 4: Now, update the TLS version to TLSv1.2 for your MySQL Flexible Database Server using the following command:<server_name> with the name of your MySQL Flexible Database Server and <resource_group_name> with the name of the resource group where your MySQL Flexible Database Server is located.Step 5: Verify that the TLS version has been updated to TLSv1.2 for your MySQL Flexible Database Server using the following command:<server_name> with the name of your MySQL Flexible Database Server and <resource_group_name> with the name of the resource group where your MySQL Flexible Database Server is located.Once you have completed these steps, the misconfiguration “Ensure TLS Version Is Set To TLSV1.2 For MySQL Flexible Database Server” will be remediated for your AZURE MySQL Flexible Database Server.Using Python
Using Python
To remediate the misconfiguration “Ensure TLS Version Is Set To TLSV1.2 For MySQL Flexible Database Server” in AZURE using Python, you can use the Azure SDK for Python. Here are the steps to remediate the misconfiguration:Note: Make sure to replace the placeholders “your_subscription_id”, “your_resource_group_name”, and “your_server_name” with your actual values. Also, make sure to authenticate the Azure credentials before running the code.
- Import the required libraries:
- Set the Azure credentials:
- Instantiate the MySQLManagementClient:
- Get the current server configuration:
- Update the server configuration to set TLS version to TLSv1.2:
- Verify the updated configuration: