How To configure data center expert 7.9.2 for enforced SMB signing

[greg.diel]

Hello all.  We are currently running DCE 7.9.2 for office UPS monitoring and we have been contacted by our IT folks to change the configuration on our server to enforce SMB signing.

"We are reaching out to request owners of systems establishing unsigned SMB sessions to enforce SMB signing.  Once all client‑side connections are enforcing SMB signing, inbound (server‑side) enforcement will be enabled on Domain Controllers and Storage devices."

I have been looking through all the documentation we have and, in the forums, and cannot find any info on how to do that.

Can anyone provide instructions or a link to a walk through?

Thanks for the help

[ATrabert]

as far as I know, there is not an option in the DCE UI to explicitly enforce SMB signing from the DCE client side.  However SMB v2/v3 should natively support this, so if the server requires it, DCE should use it.  

I've created an enhancement request to potentially add this to a future DCE release.

Also worth mentioning that the current DCE release is 9.1.1 with numerous new features, bug fixes, performance enhancements and security fixes.

https://community.se.com/t5/Data-Center-Expert-release-notes/tkb-p/data-center-expert-release-notes

[greg.diel]

Thank you.   

We are working through a plan to update our DCE server however the methods required by SE of going incrementally and using the client for each update fundamentally breaks our internal security policies.  We as users are unable to install any applications directly and the have to be reviewed and approved to be available.  This makes it essentially impossible for us to do any incremental updates and is a horrible way for to server updates.

Any time we are doing an update we are forced to deploy a new server image and manually reenter all of our UPS and PDU information.  It is 100% what is driving me to find a replacement software package.