- Control-M/Agent fails to connect remote host when SSH Server only accept SHA-2 

- The ctm_diag_comm utility directed at the remote host produces the following error:
ERROR: Couldn't agree a key exchange algorithm

SSH Server logs on the remote host would have similar errors as below.
Unable to negotiate with <host ip> port <port #>: no matching MAC found. Their offer: hmac-sha1,hmac-md5,none [preauth]

- Control-M/Agent logs will shows the below error during the failure to connect to the Remote Host using SSH:
1102 09:44:41:575 AS:<<< SshJob::pingCall: Exiting for host '<Remote Host>' port 22 user ''. rc = 1
1102 09:44:41:575 AS:>>> SshJob::ping connectionStatus is 1
1102 09:44:41:575 AS:>>> SshJob::ping m_sshCtn->authorized 0
1102 09:44:41:575 AS:>>> SshJob::ping m_sshCtn->err Server unexpectedly closed network connection
1102 09:44:41:575 AS:>>> SshJob::ping m_sshCtn->err_code 0
1102 09:44:41:575 AS:ErrorSet: Server unexpectedly closed network connection
1102 09:44:41:575 AS:>>> SshJob::ping exit

 

- CAR00118299 has been corrected in version 9.0.20 and is listed in the corrected problems list of the release notes below:

https://docs.bmc.com/docs/controlm/9020/corrected-problems-in-9-0-20-900847338.html

- In the event that it is not able to upgrade the Control-M/Agent, do discuss with the Security Team to configured the SSHD to accept hmac-sha1 and hmac-md5 authentication code