Disable Non-TLS Access for Redis Enterprise Cache Servers

01 Sign in to the Microsoft Azure Portal.

02 Navigate to All resources blade available at https://portal.azure.com/#browse/all to access all your Microsoft Azure cloud resources.

03 Choose the Azure subscription that you want to access from the Subscription equals all filter box and choose Apply.

04 From the Type equals all filter box, select Type for Filter, Equals for Operator, and Redis Enterprise cluster for Value, then choose Apply to list the Enterprise Redis cache clusters available in the selected subscription.

05 Click on the name (link) of the Redis cache cluster that you want to examine.

06 In the resource navigation panel, under Settings, select Advanced settings to access the advanced configuration settings available for the selected cluster.

07 Verify the Non-TLS access only setting checkbox to determine if your cache cluster is configured to allow non-TLS access. If the Non-TLS access only setting checkbox is checked next to Enable, the selected Enterprise Redis cache cluster is configured to accept non-TLS connections. As a result, the communication between the client and the Redis cache cluster is not encrypted.

08 Repeat steps no. 5 - 7 for each Enterprise Redis cache cluster deployed in the selected Azure subscription.

09 Repeat steps no. 3 – 8 for each Azure subscription created in your Microsoft Azure cloud account.

01 Run account list command (Windows/macOS/Linux) with custom output filters to list the IDs of the cloud subscriptions available in your Azure cloud account:

az account list
	--query '[*].id'

02 The command output should return the requested subscription identifiers (IDs):

[
	"abcdabcd-1234-abcd-1234-abcdabcdabcd",
	"abcd1234-abcd-1234-abcd-abcd1234abcd"
]

03 Run account set command (Windows/macOS/Linux) with the ID of the Azure cloud subscription that you want to examine as the identifier parameter to set the selected subscription to be the current active subscription (the command does not produce an output):

az account set
	--subscription abcdabcd-1234-abcd-1234-abcdabcdabcd

04 Run redisenterprise list command (Windows/macOS/Linux) with custom output filters to list the identifier (ID) of each Enterprise Redis cache cluster available in the selected Azure subscription:

az redisenterprise list
	--query '[*].id'

05 The command output should return the requested cache cluster IDs:

[
	"/subscriptions/abcdabcd-1234-abcd-1234-abcdabcdabcd/resourceGroups/cloud-shell-storage-westeurope/providers/Microsoft.Cache/redisEnterprise/cc-project5-redis-enterprise",
	"/subscriptions/abcdabcd-1234-abcd-1234-abcdabcdabcd/resourceGroups/cloud-shell-storage-westeurope/providers/Microsoft.Cache/redisEnterprise/cc-redis-cluster-enterprise"
]

06 Run redisenterprise show command (Windows/macOS/Linux) with the ID of the Enterprise Redis cache cluster that you want to examine as the identifier parameter and custom output filters to determine if the selected cache cluster is configured to allow non-TLS access:

az redisenterprise show
	--ids "/subscriptions/abcdabcd-1234-abcd-1234-abcdabcdabcd/resourceGroups/cloud-shell-storage-westeurope/providers/Microsoft.Cache/redisEnterprise/cc-project5-redis-enterprise"
	--query 'databases[].clientProtocol'

07 The command output should return the type of the client protocol configured for the selected cluster ("Plaintext" for non-TLS, "Encrypted" for TLS-only):

[
	"Plaintext"
]

08 Repeat step no. 6 and 7 for each Enterprise Redis cache cluster available within the current Azure subscription.

09 Repeat steps no. 3 – 8 for each Azure subscription created in your Microsoft Azure cloud account.