Current Negotiated Cipher

[anwar3]

Hello,

i have a vulnerability on  ILO 2,3,4  Cards  (SSH Server Public Key Too Small) ,when i check my card i find  this 

"Current cipher: ECDHE-RSA-AES128-GCM-SHA256" ,how i can change this to AES256 ??

solution of qualys is :DSA keys and RSA keys shorter than 2048 bits are considered vulnerable. It is recommended to install a RSA public key length of at least 2048 bits or greater, or to switch to ECDSA or EdDSA.

anyone have a solution for this vulnérabilité .

[Vinod_R]

Hello User,

Please refer below articales 

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-c04197764

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-c04582218

https://www.cvedetails.com/vulnerability-list/vendor_id-10/product_id-23648/HP-Integrated-Lights-out-4-Firmware.html

https://www.cvedetails.com/vulnerability-list/vendor_id-10/product_id-23647/HP-Integrated-Lights-out-3-Firmware.html

Thanks & Regards,

Vinod Rawat