Overview and FAQ: TLS 1.0 and 1.1 Deprecation

1. What is changing?

Cisco Meraki is implementing Transport Layer Security (TLS) 1.3 and deprecating TLS 1.0 and 1.1. Beginning in February 2026, Meraki will only support TLS 1.2 and 1.3 tunneling protocols to the Meraki cloud.   

2. Why is this change happening?

The TLS protocol is one of the primary means of protecting network communications over the internet. In August of 2018, RFC 8446 was published, providing the specifications for TLS 1.3 and some new requirements for TLS 1.2 implementations. Meraki has added TLS 1.3 to our supported protocol versions to keep our security posture aligned with the newest standards.  

More information about the compliance standards requiring the addition of TLS 1.3 and the deprecation of TLS 1.0 and 1.1 can be found in our documentation. 

3. When is this change happening?

The development work required to deprecate TLS 1.0 and 1.1 support is beginning in February 2026.

This will be rolled out across the Meraki cloud architecture in phases, so you may be impacted any time after this point. All Meraki devices that don’t support TLS 1.2 or 1.3 should be expected to no longer be able to communicate with the Meraki dashboard starting in February 2026. 

4. Which product lines are impacted?

MR Wireless, MS Switching, MX Security & SD-WAN, and Z Teleworker product lines are impacted. Please see question 8 below for a detailed list of impacted devices. 

5. What is the impact?

You will need to update your devices’ firmware to a version that supports TLS 1.2 and/or TLS 1.3. Please see question 8 below for a detailed list of impacted devices. 

Note: Some older devices may not be able to update to a firmware version that supports TLS 1.2 and 1.3. These devices are End-of-Life (EoL), meaning they are no longer eligible for service or support from Meraki. If you have one of these EoL devices and need to maintain network connectivity, they will have to be replaced with a newer device. Customers with these devices will be contacted directly with instructions on the next steps.  

6.  What action do I need to take?

If you are on a version of firmware lower than what you see listed below, you will need to update your firmware to maintain Meraki dashboard connectivity: 

• MR 25.1 for MR access points 

• MX 14 for MX Security & SD-WAN and Z Teleworker appliances 

• MS 8 for MS switches 

Legacy devices that have reached their Last Day of Support are no longer eligible for service or support from Meraki. Additionally, these devices cannot receive firmware upgrades to versions that support TLS 1.2 or newer. Therefore, such devices must be replaced with newer models to maintain security and supportability. 

Please review this document for more Information and contact Meraki Technical Support if you have any questions. if you have any questions. 

7. What happens if I do not take the requested action?

Your devices may continue to operate using the last known configuration retrieved from the Meraki dashboard; however, no additional configuration changes can be pulled by the device. If a device reboots (internal issue, power issue, etc.), it will not be able to reestablish a connection to the Meraki dashboard. It is highly recommended appropriate action be taken for your impacted devices prior to February 2026. Beyond this date, you may experience a service disruption. 

8. How do I determine which of my devices are affected?

Device models in blue have firmware that cannot be updated and therefore require a new device to be deployed. Device models in green require a firmware update. 

*If you have one of these devices and you have not been contacted directly, your device is not affected.  

9. Who do I contact if I have additional questions not covered in this FAQ?

Please contact Meraki Technical Support with any additional questions or concerns, or reach out to your account manager for assistance in purchasing new devices.