All Products
Search
Document Center

Key Management Service:Updates to TLS versions for KMS instances in US (Virginia) and US (Silicon Valley) regions

Last Updated:Aug 06, 2025

Dear Alibaba Cloud users,

To provide enhanced services, Alibaba Cloud Key Management Service (KMS) will update the supported Transport Layer Security (TLS) versions for KMS instances in the US (Virginia) and US (Silicon Valley) regions.

Effective time

Aug. 7, 2025 (UTC+8)

Before the update

KMS instances support TLS 1.0, TLS 1.1, and TLS 1.2, regardless of whether they are accessed via a dedicated or shared gateway.

After the update

Newly purchased KMS instances support TLS 1.2 only, with an exception for those purchased by existing users accessed via the shared gateway.

User type

Supported TLS (dedicated gateway)

Supported TLS (shared gateway)

New users

TLS 1.2

TLS 1.2

Existing users

TLS 1.2

TLS 1.0, TLS 1.1, and TLS 1.2

Note

For existing instances, the supported TLS versions remain unchanged (TLS 1.0, TLS 1.1, and TLS 1.2).

To enable or disable TLS 1.0 or TLS 1.1, contact us.

Thank you for your understanding and support.