Chapter Exercise – Configuring and Enabling SMB over QUIC in Windows Server 2025

This hands-on exercise guides administrators through configuring and enabling SMB over QUIC in Windows Server 2025. SMB over QUIC provides secure, efficient file transfers with reduced latency and built-in encryption, eliminating the need for VPNs. The steps include preparing the server, installing required roles and features, configuring certificates, adjusting firewall rules, and enabling SMB over QUIC. Administrators then validate the setup using PowerShell and diagnostic tools. This exercise strengthens practical skills in deploying secure file transfer protocols, optimizing performance, and ensuring compliance with modern cybersecurity standards.

SMB over QUICTLS CertificatesPowerShellSecure File Transfer

1. Preparing the Server

Ensure all updates are applied and that SMB and QUIC protocols are available. Install and launch Windows Admin Center on a Windows 11 computer.

2. Registering with Azure

From Windows Admin Center, register the server with Azure to enable resource management and connectivity.

3. Adding an Azure VM

Create a VM running Windows Server 2025 Data Center and install a TLS certificate (public or internal CA) to secure communication between clients and the server.

4. Configuring SMB over QUIC

In Windows Admin Center, select the File shares (SMB server) option. Configure SMB over QUIC by selecting the TLS certificate and specifying the port (default UDP 443). Enable the service to activate secure file sharing.

5. Security and Performance Settings

Define encryption levels.
Configure access controls.
Adjust network policies for optimized performance.

6. Validation and Testing

Use PowerShell commands and diagnostic tools to confirm that SMB over QUIC is operational. Ensure file transfers are secure and efficient across the network.

Conclusion

This exercise demonstrates how SMB over QUIC in Windows Server 2025 enhances secure, fast, and reliable file transfers. Administrators gain practical skills to deploy and manage this protocol, ensuring robust and compliant infrastructure.