Is TLS supported for NFS before ONTAP 9.19.1GA?
Applies to
- ONTAP 9
- Transport Layer Security (TLS)
- NFS
Answer
- No, before ONTAP 9.19.1GA TLS for NFS is not supported.
- ONTAP supports encryption of HTTPS, FTPS, and LDAP over SSL (LDAPS) with TLS
- If the
vserver nfs tls interface enablecommand is executed to forcibly enable NFS over TLS, the following error is returned:
Error: command failed: Cannot enable NFS over TLS because it is not supported on this platform.
Note: This error indicates that NFS over TLS is not supported on the current platform
Additional Information
- What's new in ONTAP 9.19.1
- Before 9.19.1GA:
- To encrypt ongoing transactions with NFS krb5p or IPsec are the only choices, however, it should be discussed with the account team due to performance degradation.
- Overview of using Kerberos with NFS for strong security
- NFS Kerberos in ONTAP
- Prepare to use IP security on the ONTAP network
