---
title: TLS and cipher suite requirements
description: TLS version 1.2 is supported.
component: pingone-api
page_id: pingone-api:platform:reference/handshakes
canonical_url: https://developer.pingidentity.com/pingone-api/platform/reference/handshakes.html
section_ids:
  transport-layer-security: Transport Layer Security
  cipher-suites: Cipher suites
  auth-pingone-com: auth.pingone.com
  tls-1-2-suites-in-server-preferred-order: TLS 1.2 (suites in server-preferred order)
  api-pingone-com: api.pingone.com
  tls-1-2-suites-in-server-preferred-order-2: TLS 1.2 (suites in server-preferred order)
---

# TLS and cipher suite requirements

## Transport Layer Security

TLS version 1.2 is supported.

## Cipher suites

### auth.pingone.com

#### TLS 1.2 (suites in server-preferred order)

* TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256 (0xc02f) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384 (0xc030) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_CHACHA20\_POLY1305\_SHA256 (0xcca8) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384 (0xc028) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256 (0xc027) ECDH x25519 (eq. 3072 bits RSA)

### api.pingone.com

#### TLS 1.2 (suites in server-preferred order)

* TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256 (0xc02f) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384 (0xc030) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_CHACHA20\_POLY1305\_SHA256 (0xcca8) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384 (0xc028) ECDH x25519 (eq. 3072 bits RSA)

* TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256 (0xc027) ECDH x25519 (eq. 3072 bits RSA)