AzureFeeds

Today we are releasing an update to the Azure Sphere Services, comprising:

• Ability to pause or re-enable Legacy access


• Change to expired certificate download behavior


• Ability to block devices from receiving Azure Sphere issued certificates

There are no OS or SDK updates in this release.

Ability to pause or re-enable Legacy access

You can now pause Azure Sphere (Legacy) tenant operations using the Azure portal, and you also reverse this by enabling Azure Sphere (Legacy) if paused. Azure Sphere (Legacy) is retiring on 27 September 2027, and users must migrate to Azure Sphere (Integrated). The ability to pause and enable Legacy operations assists with migration in the following ways:

• Once you have migrated Legacy use cases, you can pause the Legacy interface to assure yourself that there are no remaining use cases for Legacy, because any use of Legacy will now result in an error


• You can re-enable Legacy temporarily to enable you to migrate any remaining use cases that you discover


• For security, once you know that Legacy is no longer needed, we recommend you should pause Legacy to avoid any operations being conducted via that interface

As of this release, newly created Azure Sphere catalogs will have Legacy access paused by default. Catalogs created by integrating an existing Azure Sphere Legacy tenant will continue to have Legacy access enabled by default, to enable migration to occur without disruption.

Change to expired certificate download behavior

Azure Sphere services will no longer allow you to download expired tenant/catalog certificates. This does not impact production use cases since those certificates are already expired. The metadata for those certificates is still available when viewing your tenant/catalog’s list of certificates, but requests for the certificate body via the Legacy CLI, Integrated CLI and Portal will result in a “null” or “not found” response.

Ability to block devices from receiving Azure Sphere issued certificates

Customers may now block devices from receiving device certificates from Azure Sphere via a support request. This capability might be useful in instances such as if a device becomes lost or stolen, or if an organization wishes to decommission a device. This would prevent services like Azure IoT Hub, which are configured to trust Azure Sphere-issued certificates, from trusting such devices.  Please reach out to azsppgsup@microsoft.com if you need this capability.