Skip to main content

Jan

macOS and SMB Improvements

2 min read

Problem:

https://support.apple.com/en-us/HT205926

The Apple Support Article says:

In macOS 10.13.4 and later, packet signing is off by default. Packet signing for SMB 2 or SMB 3 connections turns on automatically when needed if the server offers it. The instructions in this article apply to macOS 10.13.3 and earlier.

Turn off packet signing for SMB 2 and SMB 3 connections

You can turn off packet signing if the client and server are on a secure network.

When you use an SMB 2 or SMB 3 connection, packet signing is turned on by default. You might want to turn off packet signing if:

• Performance decreases when you connect to a third-party server.

• You can’t connect to a server that doesn’t support packet signing.

• You can’t connect a third-party device to your macOS SMB server.

If you turn off packet signing, you lower the security of the SMB connection. Turn off packet signing only if both the client and server are on a secure network.

 

Turn off packet signing

Turn off packet signing on a macOS client

 

Check to see if your macOS computer has an /etc/nsmb.conf file.

 

If your macOS computer has a /etc/nsmb.conf file

• Open the /etc/nsmb.conf file.

• Set the signing_required value to “no,” like this:

[default]
signing_required=no

• Save the /etc/nsmb.conf file.

• Disconnect and then reconnect any mounted SMB shares to make the changes take effect.

If your macOS computer doesn’t have an /etc/nsmb.conf file

 

• Open Terminal.

• Use these commands to create an /etc/nsmb.conf file that has a signing_required value that’s set to “no”:

sudo -s
echo “[default]” >> /etc/nsmb.conf
echo “signing_required=no” >> /etc/nsmb.conf
exit

• Disconnect and then reconnect any mounted SMB shares to make the changes take effect.

Turn off packet signing on a macOS computer that hosts SMB shares