Encrypting the Message

If the client does not implement the SMB 3.x dialect family, or the request being sent is SMB2 NEGOTIATE, or the request being sent is SMB2 SESSION_SETUP with the SMB2_SESSION_FLAG_BINDING bit set in the Flags field, the client MUST NOT encrypt the message.

Otherwise, the client MUST encrypt the message as specified in section before sending, if either of the following conditions is satisfied:

  • If Session.EncryptData is TRUE.

  • If TreeConnect.EncryptData is TRUE.