https://community.netapp.com/t5/Microsoft-Virtualization-Discussions/Can-we-make-commandlet-InvokeSsh-work-with-specific-KEX-and-MAC-algorithms/m-p/160441#M6244 <P>Due to security requirements we've disabled diffie-hellman-group-exchange-sha256&nbsp; and hmac-sha1 for ssh on ONTAP 9.7.</P> <P>This makes that commandlet:InvokeSsh no longer works.</P> <P>Is there a way to make InvokeSsh work with this ONTAP ssh config?</P> <P>(e.g. Can we make it use another set of algorithms such as ecdh-sha2-nistp521, hmac-sha2-512?)</P> <P>&nbsp;</P> <P>fwiw: On the ontap side:</P> <P>cluster1::&gt; security ssh remove -vserver xxx -key-exchange-algorithms diffie-hellman-group-exchange-sha256 -mac-algorithms hmac-sha1</P> Wed, 04 Jun 2025 10:48:13 GMT rikv 2025-06-04T10:48:13Z https://community.netapp.com/t5/Microsoft-Virtualization-Discussions/Can-we-make-commandlet-InvokeSsh-work-with-specific-KEX-and-MAC-algorithms/m-p/160441#M6244 <P>Due to security requirements we've disabled diffie-hellman-group-exchange-sha256&nbsp; and hmac-sha1 for ssh on ONTAP 9.7.</P> <P>This makes that commandlet:InvokeSsh no longer works.</P> <P>Is there a way to make InvokeSsh work with this ONTAP ssh config?</P> <P>(e.g. Can we make it use another set of algorithms such as ecdh-sha2-nistp521, hmac-sha2-512?)</P> <P>&nbsp;</P> <P>fwiw: On the ontap side:</P> <P>cluster1::&gt; security ssh remove -vserver xxx -key-exchange-algorithms diffie-hellman-group-exchange-sha256 -mac-algorithms hmac-sha1</P> Wed, 04 Jun 2025 10:48:13 GMT https://community.netapp.com/t5/Microsoft-Virtualization-Discussions/Can-we-make-commandlet-InvokeSsh-work-with-specific-KEX-and-MAC-algorithms/m-p/160441#M6244 rikv 2025-06-04T10:48:13Z