Merge pull request #306721 from MicrosoftDocs/main

Auto Publish – main to live - 2025-10-09 11:00 UTC

Author: learn-build-service-prod[bot]

articles/application-gateway/application-gateway-tls-version-retirement.md

@@ -5,7 +5,7 @@ services: application gateway
 author: jaesoni
 ms.service: azure-application-gateway
 ms.topic: concept-article
-ms.date: 09/04/2025
+ms.date: 10/09/2025
 ms.author: mbender
 ms.custom:
   - build-2025
@@ -35,12 +35,12 @@ The predefined policies 20150501 and 20170401 that support TLS v1.0 and 1.1 will
 
 ### Custom policies for V2 SKUs
 
-Azure Application Gateway V2 SKU offers two types of custom policies: Custom and CustomV2. The retirement of these TLS versions affects only the "Custom" policy. The newer "CustomV2" policy comes with TLS v1.3. Beyond August 2025, the older Custom policy will support only TLS v1.2 and the following cipher suites won't be supported.
+Azure Application Gateway V2 SKU offers two types of custom policies: Custom and CustomV2. The retirement of these TLS versions affects only the "Custom" policy. The newer "CustomV2" policy comes with TLS v1.3 and also v1.2. Beyond August 2025, the older Custom policy will support only TLS v1.2 and the following cipher suites won't be supported.
 
 | Unsupported cipher suites |
 | ---------- |
-| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 |
-| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 |
+| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 * |
+| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 * |
 | TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 |
 | TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 |
 | TLS_DHE_RSA_WITH_AES_256_CBC_SHA |
@@ -52,6 +52,8 @@ Azure Application Gateway V2 SKU offers two types of custom policies: Custom and
 | TLS_RSA_WITH_3DES_EDE_CBC_SHA |
 | TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA |
 
+\* These cipher suites are available with the CustomV2 policy.
+
 ### Predefined policies for V1 SKUs
 
 The V1 SKU will only support the 20170401S policy after the older policies with TLS versions 1.0 and 1.1 are discontinued. The newer 20220101 or 20220101S policies won't be available for the soon-to-be-retired V1 SKU.

articles/hdinsight/hdinsight-release-notes.md

@@ -55,6 +55,7 @@ For workload specific versions, see [HDInsight 5.x component versions](./hdinsig
 * Grafana login now supported for Entra clusters.
 
 * C++ CodeQL scanning enabled for better static analysis coverage.
+* Managed Identity (MI) based authentication for SQL databases is now supported in non-public clouds. For more information see, [Use Managed Identity for SQL Database authentication in Azure HDInsight](./use-managed-identity-for-sql-database-authentication-in-azure-hdinsight.md)
 
 ## Issues fixed