Internal PCI scans are now reporting that file transfer protocols must be digitally signed. This is an automatic failing condition.
A server is affected if it is included in your internal PCI scope and serves Windows File Shares. This includes \\servername\c$. If the file share ports are open, SMB signing must be enabled.
Set SMB Signing at either Group Policy (domain-joined machines) or Local Security Policy (standalone workgroup).
Computer> Windows Settings> Security Settings> Local Policies> Security Options
Local Security Policy:
Local Policies> Security Options> Microsoft Network Server..