Check iSCSI client digest support before enforcing Elastic SAN CRC protection

Source facts

Elastic SAN supports CRC-32C verification for iSCSI headers and data. A volume-group property can enforce it, and every volume in that group inherits the setting. With enforcement enabled, connections lacking the required digest configuration are rejected.

Microsoft warns that some operating systems lack header or data digest support, specifically identifying Fedora and downstream distributions as lacking data digests. It advises against enabling group enforcement for clients that cannot support those digests because their connections fail. Microsoft Learn.

Applicability

Inventory all clients of the volume group, including less frequently used recovery or maintenance hosts. Verify support against the actual operating system and initiator configuration.

DSE recommendation

DSE recommends a client-by-client compatibility record before a group-wide change. Resolve unsupported clients through an approved storage design rather than assuming they negotiate the new requirement automatically. Keep the previous setting and a controlled recovery plan available. Treat this as an integrity and connection-compatibility decision, not a replacement for reviewing the separate network-access configuration.

Verification

In a controlled test, confirm the intended digest settings and reconnect representative supported clients. Check application reads and writes as well as session establishment. Record any rejected or unsupported client explicitly before extending enforcement to the shared group. A successful connection from one operating system is not sufficient evidence for the other clients that inherit the same volume-group policy.

Official references

Microsoft Learn: Azure Elastic SAN networking concepts. Source retrieved September 9, 2026.