Forum Discussion
SMB over QUIC stops working when enable Cert based Access Control
First, full disclosure I'm not well versed with Certificate Authorities. Just know the bare basics.
But I run the 'Get-SmbClientAccessToServer -Name' command it does show the Cloud PKI issuing CA cert. I also did try the using individual cert by SHA256 identifier per microsoft documentation, and that also did not work. But both are active, so not sure if that matters.
Client Cert issued via Intune to the device (not user) and does have the Client Auth EKU and I verified it has the private key. So not sure if any other config changes needed there. Just did defaults. But not 100% confident it is correct.
SMBClient > Connectivity log on client shows correct cert was offered to server
SMBServer > Connectivity does not seem to have a cooresponding entry at all for the attempt in the server side logs.
Get-SmbServerCertificateMapping -Name <fqdn> does return the GoDaddy cert as I expect.
I verified the Cloud PKI Root CA cert is in "Trusted Root Certificate Authorities > Certificates" and verified Cloud PKI Issuer CA cert is in "Intermediate Certification Authorities > Certificates"
Connection still fails even when server configured like this:
Set-SmbServerCertificateMapping -Name <fqdn> -RequireClientAuthentication $true -SkipClientCertificateAccessCheck $true . Even skipping access check it fails. So makes me think it is not the certs causing issues as per se(?)
Appreciate any more help. Or even how to collect more data to point me in the right direction because I'm stumped right now.