diff --git a/terraform/azure/main.tf b/terraform/azure/main.tf
index b2adb3c3bd..00efff717d 100644
--- a/terraform/azure/main.tf
+++ b/terraform/azure/main.tf
@@ -3,7 +3,7 @@ terraform {
   required_providers {
     azurerm = {
       source = "hashicorp/azurerm"
-      version = "2.86.0"
+      version = "2.87.0"
     }
 
     azuread = {
diff --git a/terraform/azure/storage.tf b/terraform/azure/storage.tf
index 8132fdd147..f0e98d4ced 100644
--- a/terraform/azure/storage.tf
+++ b/terraform/azure/storage.tf
@@ -11,6 +11,7 @@ resource "azurerm_storage_share" "homes" {
   name                 = "homes"
   storage_account_name = azurerm_storage_account.homes.name
   quota                = 100
+  enabled_protocol     = var.storage_protocol
 }
 
 resource "kubernetes_namespace" "homes" {
diff --git a/terraform/azure/variables.tf b/terraform/azure/variables.tf
index a8c43be841..6e326fad27 100644
--- a/terraform/azure/variables.tf
+++ b/terraform/azure/variables.tf
@@ -115,3 +115,15 @@ variable "create_service_principal" {
   Principals for UToronto.
   EOT
 }
+
+variable "storage_protocol" {
+  type        = string
+  default     = "SMB"
+  description = <<-EOT
+  The protocol used for the share. Possible values are SMB and NFS.
+
+  The SMB indicates the share can be accessed by SMBv3.0, SMBv2.1 and REST.
+  The NFS indicates the share can be accessed by NFSv4.1. Defaults to SMB.
+  Changing this forces a new resource to be created.
+  EOT
+}