topic Re: HP Nimble - SSH Weak Key Exchange Algorithms Enabled in HPE Nimble Storage Solution Specialists

HP Nimble - SSH Weak Key Exchange Algorithms Enabled

socr — Fri, 20 Oct 2023 09:03:03 GMT

How to disable SSH srvice or port ?
I didno't find any information at Nimble web page about SSH setting.

thanks.

Re: HP Nimble - SSH Weak Key Exchange Algorithms Enabled

socr — Thu, 19 Oct 2023 01:33:40 GMT

If nimble doesn't have SSH-related configurations, how can I resolve "SSH Weak Key Exchange Algorithms Enabled"?

Re: HP Nimble - SSH Weak Key Exchange Algorithms Enabled

Mahesh202 — Thu, 19 Oct 2023 13:51:00 GMT

Hi Socr

Unfortunately there is no way to disable the array's SSH service
If SSH Weak Key Exchange Algorithms Enabled is flagged then please raise a ticket with HPE Nimble Tech support and they should be able to help you with a workaround.

Hope this helps.!!

Regards
Mahesh.

Re: HP Nimble - SSH Weak Key Exchange Algorithms Enabled

socr — Fri, 20 Oct 2023 01:37:42 GMT

Hi Mahesh
I searched for two days, and in the 2018 version of the 'HPE Nimble Storage Encryption Technical White Paper,' I found a mention of Secure Hash Algorithm-256 (SHA-256). I couldn't find any versions beyond 2018.

Thank you for your help.

Re: HP Nimble - SSH Weak Key Exchange Algorithms Enabled

Mahesh202 — Thu, 26 Oct 2023 06:31:20 GMT

Hi Socr,

Yes, we have been using a SHA-256 cipher on the array.
To confirm if the array is using the correct hashing algorithm
Please use the "cert --info" command.

Regards
Mahesh.

Re: HP Nimble - SSH Weak Key Exchange Algorithms Enabled

socr — Fri, 10 Nov 2023 06:17:35 GMT

@Mahesh202 Hi Mahesh

Thank you, but I still don't understand why HP Nimble with sha256 is being flagged for having SSH Weak Key Exchange Algorithms Enabled during vulnerability scanning.

Re: HP Nimble - SSH Weak Key Exchange Algorithms Enabled

Mahesh202 — Tue, 14 Nov 2023 07:20:02 GMT

Hi Socr,

May I request you to please update to the Latest nimble GA versions. SSH Weak Key Exchange Algorithm fixed in the new releases
Beginning with OS version 6.0.0.400, the array only supports the following diffie hellman-group key exchanges for SSH sessions

https://infosight.hpe.com/InfoSight/media/cms/active/NimbleOS_Release_Notes_6.0.0.400.pdf

hope this helps.!!

Regards
Mahesh.