Thomas Maurer

Cloud and Datacenter Blog focusing on Microsoft Azure

Subscribe
, , ,

Windows 8 Consumer Preview: Cannot acces NetApp CIFS share

Thomas Maurer
Updated
1–2 minutes
6 comments on Windows 8 Consumer Preview: Cannot acces NetApp CIFS share

Windows 8 Logo

If you try to connect to a NetApp CIFS share via Windows 8 beta you may cannot access the share because of the following error:

SMB connections fail with error “Invalid Signature”

Cause:

This behavior may be due to the “Secure Negotiate” feature added to SMB 2.24 for the Windows “8” beta release, which relies on the correct signing of error responses by all SMB 2 servers (including those supporting only protocol versions 2.0 and 2.1). Some third-party file servers do not respond with a signed error response causing the connection to fail.

Microsoft has two workrounds for this problem:

  • Enable signing on the third-party file server.
  • Disable “Secure Negotiate” on the client.

You can disable “Secure Negotiate” with the following PowerShell command:

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" RequireSecureNegotiate -Value 0 -Force

Checkout the Microsoft KB2686098

Update

Only some minutes after I released this blog post I got an anwser from Glenn Sizemore (NetApp) how you can enable SMB 2 signing on the NetApp.

ONTAP CLI:

options cifs.smb2.signing.required on

PowerShell:

ipmo DataONTAP
Connect-NaController controller
Set-NaOption cifs.smb2.signing.required off

Thanks for that.

Tags, , , , , , , , , , , , , ,
Thomas Maurer
Thomas is the EMEA Global Black Belt (GBB) for Sovereign Cloud at Microsoft, helping organizations across the region harness Microsoft’s sovereign, hybrid, multicloud, and edge solutions. He works directly with C-level leaders and technical teams to remove roadblocks, accelerate digital transformation, and shape long-term cloud strategies that meet business and regulatory needs. With over 15 years of experience in cloud and datacenter, including his previous role as Principal Program Manager and Chief Evangelist for Azure Hybrid, he combines deep technical expertise with a passion for customer success. He specializes in creating scalable architectures, solution accelerators, and thought leadership that drive adoption and innovation on Azure. Thomas is a passionate community advocate and frequently speaks at industry events such as Microsoft Ignite and Microsoft TechDays. He shares his expertise through his Cloud and Datacenter Blog at www.thomasmaurer.ch and on LinkedIn and X.com www.twitter.com/thomasmaurer.

Related articles

6 responses

  1. Glenn Sizemore Avatar
    Glenn Sizemore

    Hey Thomas,

    Yeah that whole SMB evolution can be kinda tricky. Since your getting the error you must have SMB2 enabled on the controller. To get it work without hacking the registry on Windows 8 you just need to enable smb2 signing. The SMB Server in Data ONTAP is fully compliant.

    ONTAP CLI:
    options cifs.smb2.signing.required on

    PowerShell:
    ipmo DataONTAP
    Connect-NaController controller
    Set-NaOption cifs.smb2.signing.required off

    If that doesn’t work just ask a question on the netapp communities.
    ~Glenn

    Reply
  2. Jonas Avatar
    Jonas

    Shouldn’t it be

    Set-NaOption cifs.smb2.signing.required on ?

    Reply
  3. Göran Sedvall Avatar
    Göran Sedvall

    Value=0 off
    Value=1 On
    Value=2 is negotiate

    negotiate is way much better option

    Reply
  4. Mahesh Avatar
    Mahesh

    Hi,

    I have win8 Ent. I am not able to access shares from netapp storage server. Please suggest me.

    Reply
  5. Ilir Avatar
    Ilir

    please use the following command:

    Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters” RequireSecureNegotiate -Value 0 -Force

    Reply
  6. jan Avatar
    jan

    Hi,
    there are two options on NetApp
    to negotiate – the best way:
    options cifs.signing.enable on
    options cifs.smb2.signing.required off
    to force:
    options cifs.signing.enable on
    options cifs.smb2.signing.required on
    rgds jan

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.