SMB Authentication: The Basics
|
Message Authentication Codes: Settings
- Server:
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters
- EnableSecuritySignature
- The valid values are zero (0) and one (1).
If zero, then MAC signing is disabled on the server
side.
If one, then the server will support MAC signing.
- RequireSecuritySignature
- The valid values are zero (0) and one (1).
This parameter is ignored unless MAC signing is enabled
via the EnableSecuritySignature parameter.
If zero, then MAC signing is optional and will only be
used if the client also supports it.
If one, then MAC signing is required. If the client does
not support MAC signing then authentication will fail.
- Client:
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rdr\Parameters
- EnableSecuritySignature
- The valid values are zero (0) and one (1).
If zero, then MAC signing is disabled on the client
side.
If one, then the client will support MAC signing.
- RequireSecuritySignature
- The valid values are zero (0) and one (1).
This parameter is ignored unless MAC signing is enabled
via the EnableSecuritySignature parameter.
If zero, then MAC signing is optional and will only be
used if the server also supports it.
If one, then MAC signing is required. If the server does
not support MAC signing then authentication will fail.
|
|