SMBv3 encryption

Certain Microsoft Windows and Apple Mac client/server combinations can support data encryption in SMBv3 environments.

You can configure SMBv3 encryption on a per-share, per-zone, or cluster-wide basis. You can allow encrypted and unencrypted clients access. Globally and for access zones, you can also require that all client connections are encrypted.

If you set encryption settings on a per-zone basis, those settings will override global server settings.

Note Image

Per-zone and per-share encryption settings can only be configured through the OneFS command line interface.