CIFS File Encryption

Data-at-rest encryption – on VNX/Celerra no – on VNXe via self-enrypting disks

Data-in-flight encryption is possible for CIFS with the latest SMB3 support and SMB3 capable CIFS clients

no

Hi Rainer,

I recently was asked the same question about encrypting a CIFS share on a VNX2. The security folks want encryption at rest for the whole share (why good NTFS permissions coupled with SMB3 aren't adequate I don't know). Do you know if this is on the roadmap or what the alternative is?

thanks,

Dave

Hi Dave,

encryption at rest can be done (for the complete VNX) using the VNX2 DARE functionality.

If you need end-to-end encryption we have several customers using client based 3rd party software like Vormetric

Rainer

Ok thanks. I found the papers on DARE.

Dave

Was your question answered correctly? If so, please remember to mark your question Answered when you get the correct answer and award points to the person providing the answer. This helps others searching for a similar issue.

glen