Control-M/Agent cannot connect to a RHEL9 Remote Host with signature algorithms other than SHA1 when using ssh-keys

Knowledge Article

Article Number

000421127

Old Article Number

Article Type

Solutions to a Product Problem

Title

Control-M/Agent cannot connect to a RHEL9 Remote Host with signature algorithms other than SHA1 when using ssh-keys

Summary

Product

Control-M/Agent for UNIX and Microsoft Windows

Component

Control-M/Agent for UNIX and Microsoft Windows

Applies to

Control-M/Agent for UNIX and Microsoft Windows version 21 or lower.

Problem

In Control-M/Agent, when configuring a Remote Host connecting via SSH to a RedHat 9 or higher host, Run As user authentication via ssh-key does not work.

Authentication via Username/Password works correctly and is not affected.

Cause

Red Hat Enterprise Linux 9 OS default settings are not allowing signature algorithm using SHA1.

Solution

There is currently not support for using ssh-keys with signature algorithms other than SHA1.

Alternate Solution:
1) Login to the host that will be the Remote Host with the root user
2) Run the following command:
update-crypto-policies --set DEFAULT:SHA1
3) Reboot the host

Tracking Information:
CTM-9699 has been created for this issue and planned to be implemented in 9.0.22

Agent version 9.0.22 is planned to support SHA2 and the latest encryption

"Password" authentication is not impacted by this issue.

Attachment(s):