HP StorageWorks Enterprise File Services WAN Accelerator 3.0.4 installation and configuration guide (AG424-96004, March 2007)

48 2 - INSTALLING AND CONFIGURING THE HP EFS WAN ACCELERATOR
To enable Secure-CIFS 1. Connect to the CLI. For detailed information, see the HP Enterprise File Services
WAN Accelerator Command-Line Interface reference manual.
2. Enter configuration mode. At the system prompt enter the following set of
commands:
minna> enable
minna # configure terminal
minna (config) #
3. At the system prompt, enter the following command:
minna (config)# protocol cifs secure-sig-opt enable
IMPORTANT: Your changes only apply to new connections.
Disabling SMB
Signing Using
Active Directory
If the Secure-CIFS feature does not disable SMB signing, you must revise the default
SMB registry parameters. SMB signing is controlled by the following registry
parameters:
enablesecuritysignature (SSEn)
requiresecuritysignature (SSReq)
The registry settings are located in:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\l
anmanserver\parameters
The following table summarizes the default the SMB signing registry parameters.
With these default registry parameters, SMB signing is negotiated in the following
manner:
 SMB/CIFS exchanges between the Client/Workstation and the Member Server
are not signed.
 SMB/CIFS exchanges between the Client/Workstation and the Domain
Controller are always signed.
Machine Role SSEn SSReq
Client/Workstation ON OFF
Member Server OFF OFF
Domain Controller ON ON