Skip to content

Commit ae0a707

Browse files
committed
GA of AES Encryption; GA of Backup Policy Users
1 parent 1e3561e commit ae0a707

File tree

2 files changed

+9
-36
lines changed

2 files changed

+9
-36
lines changed

articles/azure-netapp-files/create-active-directory-connections.md

Lines changed: 3 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -187,29 +187,13 @@ This setting is configured in the **Active Directory Connections** under **NetAp
187187

188188
![Join Active Directory](../media/azure-netapp-files/azure-netapp-files-join-active-directory.png)
189189

190-
* **AES Encryption**
190+
* <a name="aes-encryption"></a>**AES Encryption**
191191
Select this checkbox if you want to enable AES encryption for AD authentication or if you require [encryption for SMB volumes](azure-netapp-files-create-volumes-smb.md#add-an-smb-volume).
192192

193193
See [Requirements for Active Directory connections](#requirements-for-active-directory-connections) for requirements.
194194

195195
![Active Directory AES encryption](../media/azure-netapp-files/active-directory-aes-encryption.png)
196196

197-
The **AES Encryption** feature is currently in preview. If this is your first time using this feature, register the feature before using it:
198-
199-
```azurepowershell-interactive
200-
Register-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFAesEncryption
201-
```
202-
203-
Check the status of the feature registration:
204-
205-
> [!NOTE]
206-
> The **RegistrationState** may be in the `Registering` state for up to 60 minutes before changing to`Registered`. Wait until the status is `Registered` before continuing.
207-
208-
```azurepowershell-interactive
209-
Get-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFAesEncryption
210-
```
211-
212-
You can also use [Azure CLI commands](/cli/azure/feature) `az feature register` and `az feature show` to register the feature and display the registration status.
213197

214198
* <a name="encrypted-smb-connection"></a>**Encrypted SMB connection to domain controller**
215199

@@ -267,7 +251,7 @@ This setting is configured in the **Active Directory Connections** under **NetAp
267251
268252
![Screenshot showing the Security privilege users box of Active Directory connections window.](../media/azure-netapp-files/security-privilege-users.png)
269253
270-
* **Backup policy users**
254+
* <a name="backup-policy-users"></a>**Backup policy users**
271255
You can grant additional security privileges to AD users or groups that require elevated backup privileges to access the Azure NetApp Files volumes. The specified AD user accounts or groups will have elevated NTFS permissions at the file or folder level. For example, you can specify a non-privileged service account used for backing up, restoring, or migrating data to an SMB file share in Azure NetApp Files.
272256
273257
The following privileges apply when you use the **Backup policy users** setting:
@@ -278,24 +262,7 @@ This setting is configured in the **Active Directory Connections** under **NetAp
278262
| `SeRestorePrivilege` | Restore files and directories, overriding any ACLs. <br> Set any valid user or group SID as the file owner. |
279263
| `SeChangeNotifyPrivilege` | Bypass traverse checking. <br> Users with this privilege are not required to have traverse (`x`) permissions to traverse folders or symlinks. |
280264
281-
![Active Directory backup policy users](../media/azure-netapp-files/active-directory-backup-policy-users.png)
282-
283-
The **Backup policy users** feature is currently in preview. If this is your first time using this feature, register the feature before using it:
284-
285-
```azurepowershell-interactive
286-
Register-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFBackupOperator
287-
```
288-
289-
Check the status of the feature registration:
290-
291-
> [!NOTE]
292-
> The **RegistrationState** may be in the `Registering` state for up to 60 minutes before changing to`Registered`. Wait until the status is `Registered` before continuing.
293-
294-
```azurepowershell-interactive
295-
Get-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFBackupOperator
296-
```
297-
298-
You can also use [Azure CLI commands](/cli/azure/feature) `az feature register` and `az feature show` to register the feature and display the registration status.
265+
![Active Directory backup policy users](../media/azure-netapp-files/active-directory-backup-policy-users.png)
299266
300267
* **Administrators privilege users**
301268

articles/azure-netapp-files/whats-new.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,12 @@ Azure NetApp Files is updated regularly. This article provides a summary about t
2626

2727
You can now enable SMB encryption for communication between the Azure NetApp Files service and the Active Directory Domain Services domain controller (DC). When you enable this functionality, SMB3 protocol will be used for encrypted DC connections.
2828

29+
* Features that are now generally available (GA)
30+
31+
The following features are now GA. You no longer need to register the features before using them.
32+
* **[Backup policy users](create-active-directory-connections.md#backup-policy-users)**
33+
* **[AES encryption for AD authentication](create-active-directory-connections.md#aes-encryption)**
34+
2935
## January 2022
3036

3137
* [Azure Application Consistent Snapshot Tool (AzAcSnap) v5.1 Public Preview](azacsnap-release-notes.md)

0 commit comments

Comments
 (0)