Retirement: Azure Front Door and Azure CDN profiles will end support for DHE cipher suites on April 1, 2026

As part of our ongoing commitment to security, Azure Front Door (Standard, Premium, Classic) and Azure CDN from Microsoft (Classic) services will no longer support weak cipher suites TLS\_DHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384 and TLS\_DHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256 on April 1 2026 for both ‘client to service’ connections and ‘service to origin’ connections. **Required action** To ensure uninterrupted service and maintain strong encryption standards, take the following actions: 1. Update your origins to disable DHE ciphers and use any of the recommended cipher suites. Follow our [documentation](https://aka.ms/afd-dhe "https://aka.ms/afd-dhe") to see how to update cipher suites for some of the common origin types used with Azure Front Door/Azure CDN. 2. Inform your clients to only use the recommended ciphers while connecting to your domains hosted on Azure Front Door/Azure CDN. If you own any of the clients, update them to use the recommended ciphers. 3. For Front Door Standard/Premium profiles, you can also use the [Configure Azure Front Door TLS policy](https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/tls-policy-configure "https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/tls-policy-configure") feature to disable the DHE ciphers in advance before 1 April 2026\. For all Front Door (Standard, Premium, Classic) and Azure CDN from Microsoft (Classic) profiles, we will disable the DHE ciphers after April 1 2026. **Help and support** For more information and guidance regarding DHE cipher retire, refer to our [documentation](https://aka.ms/afd-dhe "https://aka.ms/afd-dhe"). If you have questions, get answers from community experts in [Microsoft Q&A](https://learn.microsoft.com/en-us/answers/tags/96/azure-front-door "https://learn.microsoft.com/en-us/answers/tags/96/azure-front-door"). If you have a support plan and need technical help, please submit a [support request](https://learn.microsoft.com/azure/azure-portal/supportability/how-to-create-azure-support-request "https://learn.microsoft.com/azure/azure-portal/supportability/how-to-create-azure-support-request") .