diff --git a/src/ci/azcopy.sh b/src/ci/azcopy.sh
index 39c633024..6b906092a 100755
--- a/src/ci/azcopy.sh
+++ b/src/ci/azcopy.sh
@@ -7,10 +7,12 @@ set -ex
 
 mkdir -p artifacts/azcopy
 
-wget --retry-connrefused -t 30 --waitretry=5 -O azcopy.zip https://aka.ms/downloadazcopy-v10-windows
+# NOTE: hard-coded to TLSv1.2 per aka.ms team to work around download failures
+wget --secure-protocol=TLSv1_2 --retry-connrefused -t 30 --waitretry=5 -O azcopy.zip https://aka.ms/downloadazcopy-v10-windows
 unzip azcopy.zip
 mv azcopy_windows*/* artifacts/azcopy/
 
-wget --retry-connrefused -t 30 --waitretry=5 -O azcopy.tgz https://aka.ms/downloadazcopy-v10-linux
+# NOTE: hard-coded to TLSv1.2 per aka.ms team to work around download failures
+wget --secure-protocol=TLSv1_2 --retry-connrefused -t 30 --waitretry=5 -O azcopy.tgz https://aka.ms/downloadazcopy-v10-linux
 tar zxvf azcopy.tgz
 mv azcopy_linux_amd64*/* artifacts/azcopy/