Skip to main content
NetApp Knowledge Base

What SMB encryption is supported in ONTAP 9

  1. Last updated
    Jan 16, 2025
  2. Save as PDF
Views:
348
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:
1/16/2025, 4:54:06 AM

Applies to

  • ONTAP 9
  • CIFS

Answer

The SMB encryption supported in ONTAP 9 is as follows:

  • AES-256-GCM encryption is supported
  • AES-256-CCM encryption is not supported
  • AES-128-CCM encryption is supported（SMB 3.X）
  • AES-128-GCM encryption is supported（SMB 3.1.1）

Additional Information

The encryption support for protocols other than SMB (such as SSH, TLS, NFS, etc.) is as follows:

  • For SSH, the following encryption methods can be specified:

aes256-ctr
aes192-ctr
aes128-ctr
aes256-cbc
aes192-cbc
aes128-cbc
3des-cbc
aes128-gcm
aes256-gcm

 

  • AES-128-CCM is not supported for SSH.
  • Regarding TLS, a specific list of encryption methods is not provided, but the standard encryption methods used in TLS 1.2 and TLS 1.3 are generally supported.
  • For NFS, a specific list of encryption methods is not provided, but encryption is supported in NFSv4.1 and NFSv4.2.

 

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.