SMB 3.0 feature support validation - AES128 encryption

EMC VNX, Microsoft Windows Server 2012 Hyper-V, Microsoft SharePoint Server 2013, Microsoft Lync Server 2013

·     Provides an efficient virtualized infrastructure

·     Ensures a cost efficient storage design



This is an extract from the white paper Microsoft SharePoint Server 2013 and Lync Server 2013 Enhanced by EMC VNX with SMB 3.0. The full white paper and solution pack is available at


This section describes how to enable and validate the AES128 encryption in SMB 3.0.


AES128 encryption

This feature is not enabled by default on VNX. To enable it, run the following command:

[nasadmin@CS ~]$ server_export server_2 -name SMB3_FS -o type=Encrypted /SMB3_FS

server_2: done




Figure 1 shows the increase in Data Mover utilization with encryption enabled on the SMB 3.0 shares.




Figure 1.              CPU busy rate


Note: Encryption of packets causes higher CPU usage on both client and VNX to encrypt or decrypt the packet, so use this feature selectively for sensitive data instead of encrypting all data.