Hello Denis,
In addition if you still want to confirm if the encryption is really enabled you can collect a network trace and should see that the text file in the package is not in readable format.
------------------------------
Rohit Chauhan
Senior Technical Specialist
Norway
------------------------------
Original Message:
Sent: Wed November 13, 2024 03:45 AM
From: Denis Roche
Subject: Share encryption
Thank you very much Nikos.
This technote is just the one that I couldn't find myself.
We upgraded earlier this year from V7R2 to V7R5 and I forgot to check which SMB version we were running on the new server. Now this is also done. Thank you again.
------------------------------
Denis Roche
------------------------------
Original Message:
Sent: Wed November 13, 2024 03:13 AM
From: NIKOS METAXATOS
Subject: Share encryption
Hello Denis,
not sure which IBM i release you are on, but please have a look at the following IBM Technote: https://www.ibm.com/support/pages/ibm-i-netserver-smb-protocol-version-control-guide to check SMB support per IBM i OS version.
To my understanding, by setting Encrypted connections to REQUIRED and the same for each file share, as well as, by making sure you have enabled both protocols SMB2 and SMB3 on IBM i Netserver, I think you are ok, assuming your Windows environment supports SMB3.
Please note the following statement from the above IBM Technote:
"SMB3 will not work if you disable SMB2. Right now on the IBM i SMB3 is a superset of SMB2.
SMB2 must stay enabled! To make Clients negotiate with SMB3 only you must have SMB2 enabled and set the option Encrypt connections to *REQUIRED. "
And lastly the encrypted traffic will go through the usual port 445.
Good luck,
regards,
Nikos
------------------------------
NIKOS METAXATOS