Security is at the forefront of many administrator's minds and with Failover Clustering, we did some improvements with Windows Server 2019 and Azure Stack HCI with regards to security.
Sinc...
Updated Jun 06, 2022
Version 3.0
Blog Post
Considering to SecurityLevel=1/2, some traffics which do not include any user data are running over NetFT e.g. Cluster heartbeat package. Therefore, changing the SecurityLevel setting does not affect the cluster heartbeat (MSRCP).
- When SecurityLevel is set to Signed, messages are signed using https://nam06.safelinks.protection.outlook.com/?url=https:%2f%2flearn.microsoft.com%2fen-us%2fwindows%2fwin32%2fapi%2fsspi%2fnf-sspi-makesignature&data=05%7c02%7cVarian.Zhao%40microsoft.com%7c50c37198d63d4ccf04b208dd549c2183%7c72f988bf86f141af91ab2d7cd011db47%7c1%7c0%7c638759751814222520%7cUnknown%7cTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7c0%7c%7c%7c&sdata=4EKujN1dZr6AX%2BmofU%2BoDwUcOBtrSKGoiOXwOz09Gk0%3D&reserved=0 to ensure integrity and prevent message tampering or loss.
- When SecurityLevel is set to Encrypted, messages are encrypted using https://nam06.safelinks.protection.outlook.com/?url=https:%2f%2flearn.microsoft.com%2fen-us%2fwindows%2fwin32%2fsecauthn%2fencryptmessage--digest&data=05%7c02%7cVarian.Zhao%40microsoft.com%7c50c37198d63d4ccf04b208dd549c2183%7c72f988bf86f141af91ab2d7cd011db47%7c1%7c0%7c638759751814246383%7cUnknown%7cTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7c0%7c%7c%7c&sdata=XUIVrx%2fBetrQcwgju2eiQKs76O%2frelqJHZQMAVnKKd0%3D&reserved=0 to ensure confidentiality.