Skip to content

Ensure server parameter 'require_secure_transport' is set to 'ON' for MySQL flexible server

Why This Matters

Unencrypted connections to your MySQL flexible servers expose your data to potential interception by attackers. When require_secure_transport is disabled, client applications can connect without enforcing SSL, leaving your database vulnerable to man-in-the-middle attacks. Enforcing this setting ensures all data in transit between your applications and database is encrypted, maintaining a critical layer of defense.

What Aether365 Checks

Aether365 verifies that the require_secure_transport server parameter on each MySQL flexible server is set to ON. This check appears in the Aether365 dashboard under the azure-mysql-server checks category and reports any noncompliant resources.

Microsoft references

Was this page helpful?