At present, API Management service instances are created with TLS 1.0/1.1/1.2 enabled by default.
All new API Management service instances will be created with TLS 1.0/1.1 and 3DES cipher disabled by default. TLS 1.2 will be the only TLS version enabled by default.
TLS configuration of API Management service instances created before April 1, 2018, will remain unchanged:
https://blogs.msdn.microsoft.com/apimanagement/2018/02/08/upcoming-changes-to-tls-defaults-in-api-management-required-to-maintain-compliance/.
By default, TLS 1.2 is also enabled for Azure API Management gateway:
https://feedback.azure.com/forums/248703-api-management/suggestions/11448693-tls-1-2-for-connection-to-backend-webservice
-----------------------------------------------------------------------------------------------------
If this answer was helpful, click “Mark as Answer” or Up-Vote. To provide additional feedback on your forum experience, click
here