Microsoft Virtualization Discussions

Can we make commandlet:InvokeSsh work with specific KEX and MAC algorithms?

rikv
1,529 Views

Due to security requirements we've disabled diffie-hellman-group-exchange-sha256  and hmac-sha1 for ssh on ONTAP 9.7.

This makes that commandlet:InvokeSsh no longer works.

Is there a way to make InvokeSsh work with this ONTAP ssh config?

(e.g. Can we make it use another set of algorithms such as ecdh-sha2-nistp521, hmac-sha2-512?)

 

fwiw: On the ontap side:

cluster1::> security ssh remove -vserver xxx -key-exchange-algorithms diffie-hellman-group-exchange-sha256 -mac-algorithms hmac-sha1

0 REPLIES 0
Public