Control-M/Agent cannot connect to a RHEL9 Remote Host with signature algorithms other than SHA1 when using ssh-keys

Knowledge Article

Article Number

000421127

Old Article Number

Article Type

Solutions to a Product Problem

Title

Control-M/Agent cannot connect to a RHEL9 Remote Host with signature algorithms other than SHA1 when using ssh-keys

Summary

Product

Control-M/Agent for UNIX and Microsoft Windows

Component

Control-M/Agent for UNIX and Microsoft Windows

Applies to

Control-M/Agent ; all versions

Problem

In Control-M/Agent, when configuring a Remote Host connecting via SSH to a RedHat 9 or higher host, Run As user authentication via ssh-key does not work.

Authentication via Username/Password works correctly and is not affected.

Cause

Red Hat Enterprise Linux 9 OS default settings are not allowing signature algorithm using SHA1.

Solution

Alternate Solution prior to version 9.0.22:
1) Login to the host that will be the Remote Host with the root user
2) Run the following command:
update-crypto-policies --set DEFAULT:SHA1
3) Reboot the host

Tracking Information:
CTM-9699 has been created for this issue and is implemented in version 9.0.22

Agent version 9.0.22 supports SHA2 and the latest encryption

"Password" authentication is not impacted by this issue.

Attachment(s):