HP StorageWorks Enterprise File Services WAN Accelerator 2.1 Installation and Configuration Guide (November 2005)

46 2 - INSTALLING AND CONFIGURING THE HP EFS WAN ACCELERATOR
To enable Secure-CIFS 1. Connect to the CLI. For detailed information, see the HP Enterprise File
Services WAN Accelerator Command-Line Interface Reference Manual.
2. Enter configuration mode. At the system prompt enter the following set of
commands:
minna> enable
minna # configure terminal
minna (config) #
3. At the system prompt, enter the following command:
minna (config)# protocol cifs secure-sig-opt enable
IMPORTANT: Your changes only apply to new connections.
Disabling SMB
Signing Using
Active Directory
If the Secure-CIFS feature does not disable SMB signing, you must revise the
default SMB registry parameters. SMB signing is controlled by the following
registry parameters:
enablesecuritysignature (SSEn)
requiresecuritysignature (SSReq)
The registry settings are located in:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\l
anmanserver\parameters
The following table summarizes the default the SMB signing registry
parameters.
With these default registry parameters, SMB signing is negotiated in the
following manner:
 SMB/CIFS exchanges between the Client/Workstation and the Member
Server are not signed.
 SMB/CIFS exchanges between the Client/Workstation and the Domain
Controller are always signed.
Machine Role SSEn SSReq
Client/Workstation ON OFF
Member Server OFF OFF
Domain Controller ON ON