What is the impact of enforcing SMB signing?
Applies to
- ONTAP 9
- SMB
Answer
- Enforcing SMB Signing has usually no negative impact as most/all current Windows OS versions likely already have the ability to sign
- To confirm if any clients are NOT signing, the below command indicates
false
.
::> vserver cifs session show -vserver SVM1 -fields is-session-signed
Note: false
indicates the client did not sign - it does not indicate it does not have the ability to sign.
Additional Information
- ONTAP CIFS-enabled SVMs will already support SMB signing, but it’s not enforced by default.
- Enable or disable required SMB signing for incoming SMB traffic
- Windows OS versions support SMB signing:
- Windows 11 Insider Preview Build25905 or later
- Windows Server 2025 or later
- Windows 11 Enterprise editions
- Windows Server 2022
- Windows 98
- Windows 2000
- Windows NT 4.0
- For other Operating Systems (e.g. Linux) mounting CIFS shares meant to enforce signing, test before changing configuration.
Note: For more detailed information, engage the OS Vendor.