Internal PCI scans are now reporting that file transfer protocols must be digitally signed.  This is an automatic failing condition.

A server is affected if it is included in your internal PCI scope and serves Windows File Shares.  This includes \\servername\c$.  If the file share ports are open, SMB signing must be enabled.

Set SMB Signing at either Group Policy (domain-joined machines) or Local Security Policy (standalone workgroup).

Group Policy:
Computer> Windows Settings> Security Settings> Local Policies> Security Options

Local Security Policy:
Local Policies> Security Options> Microsoft Network Server..