Session Recording external storage cannot be mounted the Azure files

Document ID : KB000118457
Last Modified Date : 25/10/2018
Show Technical Document Details
Question:
I deployed the PAM on the Azure and tried to mount the shared folder by the Azure Files Storage for the session recording. However, I could not mount it by the below error. 
 
ERROR: PAM-CM-0058 : CIFS mount operation unsuccessful. Mount point: //xxxxx.file.core.windows.net/pam-sessionlog Hostname: xxxxx.file.core.windows.net 

I verified that the port 445 was opened.
Also, the below errors were updated when the problem occurred.
 
Aug 9 09:44:53 capam kernel: Status code returned 0xc0000022 STATUS_ACCESS_DENIED 
Aug 9 09:44:53 capam kernel: CIFS VFS: Send error in SessSetup = -13 
Aug 9 09:44:53 capam kernel: CIFS VFS: cifs_mount failed w/return code = -13 

What is a possible cause?
Environment:
CA Privileged Access Manager r3.x
Answer:
The trigger was a specific settings in the Azure files feature. The "Secure transfer required" option is located in the below. When it is enabled, the problem occurs. When it is disabled, the problem starts to work without any problem. 
 
Azure Portal ->> Storage accounts >> (specific storage account) >> Configuration in the Settings section >> "Secure transfer required" option. 

The "Secure Transfer Required" option enable usage is NOT supported as the external storage for the session recording on the r3.2.x.