HP Nimble - SSH Weak Key Exchange Algorithms Enabled

[socr]

Hi 

How to disable SSH srvice or port ? 
I didno't find any information at Nimble web page about SSH setting.

thanks.

[socr · Accepted solution]

If nimble doesn't have SSH-related configurations, how can I resolve "SSH Weak Key Exchange Algorithms Enabled"?

[Mahesh202]

Hi Socr

Unfortunately there is no way to disable the array's SSH service
If SSH Weak Key Exchange Algorithms Enabled is flagged then please raise a ticket with HPE Nimble Tech support and they should be able to help you with a workaround.

Hope this helps.!!

Regards
Mahesh.

[socr]

Hi Mahesh
I searched for two days, and in the 2018 version of the 'HPE Nimble Storage Encryption Technical White Paper,' I found a mention of Secure Hash Algorithm-256 (SHA-256). I couldn't find any versions beyond 2018.

Thank you for your help.

[Mahesh202]

Hi Socr,

Yes,  we have been using a SHA-256 cipher on the array.
To confirm if the array is using the correct hashing algorithm 
Please use the  "cert --info"  command.

Regards
Mahesh.

[socr]

@Mahesh202 Hi Mahesh

Thank you, but I still don't understand why HP Nimble with sha256 is being flagged for having SSH Weak Key Exchange Algorithms Enabled during vulnerability scanning.

[Mahesh202]

Hi Socr,

May I request you to please update to the Latest nimble GA versions. SSH Weak Key Exchange Algorithm fixed in the new releases
Beginning with OS version 6.0.0.400, the array only supports the following diffie hellman-group key exchanges for SSH sessions

https://infosight.hpe.com/InfoSight/media/cms/active/NimbleOS_Release_Notes_6.0.0.400.pdf

hope this helps.!!

Regards
Mahesh.