Control-M/Agent cannot connect to a RHEL9 Remote Host with signature algorithms other than SHA1 when using ssh-keys

Knowledge Article

Article Number

000421127

Old Article Number

Article Type

Solutions to a Product Problem

Title

Control-M/Agent cannot connect to a RHEL9 Remote Host with signature algorithms other than SHA1 when using ssh-keys

Summary

Product

Control-M/Agent for UNIX and Microsoft Windows

Component

Control-M/Agent for UNIX and Microsoft Windows

Applies to

Control-M/Agent for UNIX and Microsoft Windows all versions

Problem

In Control-M/Agent, when configuring a Remote Host connecting via SSH to a RedHat 9 or higher host, Run As user authentication via ssh-key does not work.

Authentication via Username/Password works correctly and is not affected.

Cause

Red Hat Enterprise Linux 9 OS default settings are not allowing signature algorithm using SHA1.

Solution

There is currently no support for using ssh-keys with signature algorithms other than SHA1.

Alternate Solution:
1) Login to the host that will be the Remote Host with the root user
2) Run the following command:
update-crypto-policies --set DEFAULT:SHA1
3) Reboot the host

Tracking Information:
CTM-9699 has been created for this issue and will be implemented in a future release.
"Password" authentication is not impacted by this issue.

Attachment(s):