Cannot mount Windows 2019 CIFS share

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM Admin cannot mount their CIFS share on a Windows 2019 server.  It fails with the following error: 

Error: PAM-CM-0058: CIFS mount operation unsuccessful. Mount point: <mount path> Hostname: <Hostname>

Environment

Release : 3.4.x, 4.0.x

Component : PRIVILEGED ACCESS MANAGEMENT

Cause

Server or Share had SMB Encryption set to "Enabled"

Resolution

Had PAM Admin run the following command on their CIFS Server:

Get-SmbShare -Name <ShareName> | Format-List -Property *

which the following setting came back as True:

EncryptData           : True

By default, when SMB Encryption is enabled for a file share or server, only SMB 3.0, 3.02, and 3.1.1 clients are allowed to access the specified file shares. This enforces the administrator's intent of safeguarding the data for all clients that access the shares.

Therefore in PAM, when this setting in True, the SMB Version needs to be set to 3.0

Additional Information

Alternatively this message can be caused by a trailing space in the share name:

https://knowledge.broadcom.com/external/article/218338/pamcm0058-cifs-mount-operation-unsuccess.html