Enabling vCenter Server Appliance (VCSA) to use SMB2

VMware’s KB (https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2134063) about joining the appliance to the domain only shows the option of enabling SMB1 on your domain controller.  With VMware Support, we were able to figure how to enable SMB2 communication from the vCSA to the domain controllers.

  1. SSH into the vCSA
  2. enable the bash shell
    1. shell.set --enabled true
  3. enter the bash shell
    1. shell
  4. Set the SMB2Enabled Flag in likewise’s config:
    1. /opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]' Smb2Enabled 1
  5. You can verify the values with the following command:
    1. /opt/likewise/bin/lwregshell list_values '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]'
  6. Then restart likewise:
    1. /opt/likewise/bin/lwsm restart lwio

Now the vCSA will use SMB2! This can be required if you have security policy requiring the disablement of SMB1.

8 thoughts on “Enabling vCenter Server Appliance (VCSA) to use SMB2

  1. This was a huge help today! One thing to note, the single quotes you have turn into backticks when you copy and paste. If you could update that in your post, it would be great.

    Like

  2. Thanks for sharing, we recently disabled domain wide smb 1 because of Wannacry and for some reason authentication from our Veeam backup server to the VC started failing, web access to the VMWare web client too, we enabled smbv2 and now all looks good

    Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s