Skip to content

Commit 4178aab

Browse files
author
Julie Chen
authored
comment out Kerberos encryption (AES-128, AES-256)
Due to hotfix, commenting out the following bullet -- * Azure NetApp Files supports DES, Kerberos AES 128, and Kerberos AES 256 encryption types (from the least secure to the most secure). The user credentials used to join Active Directory must have the highest corresponding account option enabled that matches the capabilities enabled for your Active Directory. For example, if your Active Directory has only the AES-128 capability, you must enable the AES-128 account option for the user credentials. If your Active Directory has the AES-256 capability, you must enable the AES-256 account option (which also supports AES-128). If your Active Directory does not have any Kerberos encryption capability, Azure NetApp Files uses DES by default. You can enable the account options in the properties of the Active Directory Users and Computers MMC console: ![Active Directory Users and Computers MMC](../media/azure-netapp-files/ad-users-computers-mmc.png)
1 parent c5010d7 commit 4178aab

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

articles/azure-netapp-files/azure-netapp-files-create-volumes-smb.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.workload: storage
1313
ms.tgt_pltfrm: na
1414
ms.devlang: na
1515
ms.topic: conceptual
16-
ms.date: 03/31/2020
16+
ms.date: 04/03/2020
1717
ms.author: b-juche
1818
---
1919
# Create an SMB volume for Azure NetApp Files
@@ -69,13 +69,15 @@ A subnet must be delegated to Azure NetApp Files.
6969

7070
See [Designing the site topology](https://docs.microsoft.com/windows-server/identity/ad-ds/plan/designing-the-site-topology) about AD sites and services.
7171

72+
<!--
7273
* Azure NetApp Files supports DES, Kerberos AES 128, and Kerberos AES 256 encryption types (from the least secure to the most secure). The user credentials used to join Active Directory must have the highest corresponding account option enabled that matches the capabilities enabled for your Active Directory.
7374
7475
For example, if your Active Directory has only the AES-128 capability, you must enable the AES-128 account option for the user credentials. If your Active Directory has the AES-256 capability, you must enable the AES-256 account option (which also supports AES-128). If your Active Directory does not have any Kerberos encryption capability, Azure NetApp Files uses DES by default.
7576
7677
You can enable the account options in the properties of the Active Directory Users and Computers MMC console:
7778
7879
![Active Directory Users and Computers MMC](../media/azure-netapp-files/ad-users-computers-mmc.png)
80+
-->
7981

8082
See Azure NetApp Files [SMB FAQs](https://docs.microsoft.com/azure/azure-netapp-files/azure-netapp-files-faqs#smb-faqs) about additional AD information.
8183

0 commit comments

Comments
 (0)