Guide to Querying TLS Versions for TencentCloud API Calls
Baixar
Modo Foco
Tamanho da Fonte
Scenarios
TencentCloud API calls are transmitted over TLS. To check the TLS version actually used by API calls under your account, for example for protocol compatibility troubleshooting or security baseline audits, you can query the event records in CloudAudit. This document describes how to do so.
Prerequisites
You have logged in to the Tencent Cloud console.
Your account has TencentCloud API call records. CloudAudit retains call events from the last three months by default.
The data that can be queried includes the following:
Sub-account: can view only its own call records.
Root account: can query all call records of itself and its sub-accounts.
Organization administrator account or organization account granted CloudAudit administrator permissions: can view call records of all accounts under the organization.
Operation Steps
1. Log in to the Tencent Cloud console and go to CloudAudit >Operation Records. Select the time range in the upper-left corner as needed. CloudAudit data is retained for nearly three months, and a single query supports a maximum time range of 30 days. To cover a longer period, you can query in segments by specifying a custom time range in Custom Time.
2. Click Unfold, enter the specific TLS version in the TLS field, such as
TLSv1, TLSv1.1, TLSv1.2, or TLSv1.3, to query the call records of the corresponding version, and then click Search. To locate the source of a call, combine filters such as Operator, Source IP Address, and Key ID to narrow the scope.Note:
CloudAudit has recorded the TLS version of operations since 2026-08-27. For operation records after this date, the TLS version information (
sslProto field) can be queried. For operation records before this date, this field cannot be queried.If you find calls using
TLSv1 or TLSv1.1, upgrade as soon as possible. TencentCloud API will stop supporting the TLSv1 and TLSv1.1 protocols starting from 2026-12-01 00:00:00 Beijing time.
3. Click any event in the event list to display the event details on the right. Expand the event record and view the
sslProto field in the JSON. The value of this field is the TLS version used for that call. If the event JSON does not contain the sslProto field or its value is empty, the event does not involve the TLS protocol (such as a console login event) or occurred before 2026-08-27, and it can be ignored. For a complete description of event fields, see Viewing Operation Record Event Details.
Ajuda e Suporte
Esta página foi útil?
Você também pode entrar em contato com a Equipe de vendas ou Enviar um tíquete em caso de ajuda.
comentários