Enabling vCenter Server Appliance to use SMB2

Products

• VMware vCenter Server

Issue/Introduction

• Enable vCenter Server Appliance to use SMB2 to overcome WannaCry caused by an SMB1 vulnerability
• Attempting to join the vCSA to AD domain fails with Error: ERROR_GEN_FAILURE [code 0x0000001f]

Environment

VMware vCenter Server Appliance 5.5.x
VMware vCenter Server Appliance 6.5.x
VMware vCenter Server Appliance 6.7.x
VMware vCenter Server Appliance 6.0.x

Resolution

To resolve this issue:

 

1. Connect to the vCenter Server Appliance using SSH session.
    
2. Run this command to enable the Bash shell:
   
   shell.set --enabled true
    
3. Run this command to access the Bash shell:
   
   shell
    
4. Set the SMB2Enabled flag in likewise's config:
   
   /opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]' Smb2Enabled 1
   
    
5. Run this command to verify the values:
   
   /opt/likewise/bin/lwregshell list_values '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]'
    
6. Restart likewise service:
   
   /opt/likewise/bin/lwsm restart lwio

Note: If the value does not exist, the above may fail. To create the value in that instance, run:

/opt/likewise/bin/lwregshell add_value '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]' Smb2Enabled REG_DWORD 1