Skip to main content

Certificates

Automate

Ensure that SSL certificates are automated and renewed regularly.

Use services such as Microsoft managed certificates or LetsEncrypt to automate the process of obtaining and renewing SSL certificates.

TLS

Use TLS 1.3 with a 2048-bit RSA or 256-bit ECDSA key.

Do not use TLS 1.0 or 1.1.

This page was last reviewed on 11 May 2026. It needs to be reviewed again on 11 May 2027 by the page owner platops-build-notices .