SMB 3.0 feature support validation - AES128 encryption

EMC VNX, Microsoft Windows Server 2012 Hyper-V, Microsoft SharePoint Server 2013, Microsoft Lync Server 2013

·     Provides an efficient virtualized infrastructure

·     Ensures a cost efficient storage design

 

 

This is an extract from the white paper Microsoft SharePoint Server 2013 and Lync Server 2013 Enhanced by EMC VNX with SMB 3.0. The full white paper and solution pack is available at https://community.emc.com/docs/DOC-29096.

 

This section describes how to enable and validate the AES128 encryption in SMB 3.0.

 

AES128 encryption

This feature is not enabled by default on VNX. To enable it, run the following command:

[nasadmin@CS ~]$ server_export server_2 -name SMB3_FS -o type=Encrypted /SMB3_FS

server_2: done

 

 

 

Figure 1 shows the increase in Data Mover utilization with encryption enabled on the SMB 3.0 shares.

 

fafafafa.jpg

 

Figure 1.              CPU busy rate

 

Note: Encryption of packets causes higher CPU usage on both client and VNX to encrypt or decrypt the packet, so use this feature selectively for sensitive data instead of encrypting all data.