Enable AES encryption on the SMB server.

Question

Hello everyone.

I want to enable AES encryption, when selecting my Azure account netapp files, in the netapp part there is an Active directory connection, in which I can enable AES Encryption with a checkbox, I understand that if I want to activate it I have no problem , but as a security, we are looking for a maintenance window, has anyone enabled it? causes some interruption, is anything additional needed from active directory?

Regards for all

Answer 1

@Juan Pablo Delgadillo Firstly, Apologies for the delay response!

Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Enabling AES encryption for Active Directory authentication in Azure NetApp Files You may refer to this article. However, it is recommended to test the configuration in a non-production environment before enabling it in production to ensure that there are no issues.

• Open the admin account and select both 128 and 256 AES encryption 

Regarding the maintenance window, enabling AES encryption for Active Directory authentication in Azure NetApp Files does not cause any interruption or downtime. However, it is recommended to perform this operation during a maintenance window to avoid any potential issues that may arise during the configuration process.

AES encryption for Azure NetApp Files should not directly impact your Active Directory integration. The encryption process is handled within Azure NetApp Files, and it doesn't typically require changes or updates to your Active Directory configuration.

Additional information: https://docs.netapp.com/us-en/ontap/smb-admin/enable-disable-aes-encryption-kerberos-task.html

Please let us know if you have any further queries. I’m happy to assist you further.     

---

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.