"TLS: client offered only unsupported versions" error on client when connecting to the AKS API server

Summary

This article provides a solution to a "tls: client offered only unsupported versions" error that occurs on the client computer or virtual machine when connecting to the Microsoft Azure Kubernetes Service (AKS) API server.

Symptoms

When you try to connect to the Microsoft Azure Kubernetes Service (AKS) API server, you receive the following error message from your client computer or virtual machine:

tls: client offered only unsupported versions

Cause

Your version of the Transport Layer Security (TLS) protocol is out of date. The minimum supported version in AKS is TLS 1.2.

Solution

Upgrade your TLS version to 1.2. For upgrade instructions, see Enable support for TLS 1.2 in your environment.