Cisco ASA SCP Backup failed

[Marco Serato]

Hello Community
I would like to transfer the ASA backup to a server via SSH using the "backup" command.
However, this fails because the host key cannot be validated.
Unfortunately, I have not found anything how to accept the host key.
Does anyone know the problem:

Copying Backup ...The authenticity of host '10.10.10.10 (10.10.10.10)' can't be established.
Hostkey fingerprint is <19:8a:...:baa(SHA256).
Host key verification failed.

%Error opening scp://backupuser:<password>@10.10.10.10/ASA.backup.2023-12-07-150018.tar.gz (Permission denied)ERROR: Resource temporarily unavailable

Greetings Martin

[balaji.bandi]

i see couple of issue :

Host key verification failed.   - check the Ciphers

(Permission denied)ERROR: Resource temporarily unavailable  - make sure you use ssh v2 required ciphers

This show me either you do not have write to folder you looking to write ?

from ASA are you able to reach the destinatio ping ?

what is the logs you see on the destination ? what SCP Server ?

[MHM Cisco World · Accepted solution]

Ssh scopy enable 

Then

Ssh public key chain 

Server x.x.x.x

Key-string

Add key here

MHM

[MHM Cisco World · Accepted solution]

More info.check this guide

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/admin-swconfig.html

MHM

[Marco Serato]

Thank you very much.
It was indeed the missing public key chain. Since "ssh stricthostkeycheck" was activated, this was checked.

Alternatively, the check can also be deactivated, but this is not advisable.

[MHM Cisco World]

Friend you are so so welcome 

Have a nice day 

MHM