how we can diable SSH CBC encryption and enable CTR or GCM encrypition mode in CUCM 11.0

[ravisingh.hcl]

Hi,

we are using Cisco Unified CM Administration System version: 11.0.1.

Currently  SSH server is configured to support Cipher Block Chaining (CBC) encryption. 

Is it possible to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption in CUCM System 11.0.

 which steps we need to follow.,

Ra

[Jaime Valencia]

That is not possible right now

Disable CBC Ciphers in SSHD
CSCva42141

CUCM: SSH Server CBC Mode Ciphers Enabled
CSCuy51220

[PGE_JosephHiatt]

 This is probably true of version 10.5?  CBC is the hard coded encryption method.

[PGE_JosephHiatt]

---

@Jaime Valencia wrote:

That is not possible right now

Disable CBC Ciphers in SSHD
CSCva42141

CUCM: SSH Server CBC Mode Ciphers Enabled
CSCuy51220

---

 This is probably true of version 10.5?  CBC is the hard coded encryption method.

[pheadden]

Would this be true in Cisco Unity Connection as well? Thanks

[Flo.Matalis]

Hi,

CUCM: 12.5.1.10000-22

Can someone please confirm if our CUCM 12.5 is still affected by this bug? And also, is there other way to disable SSH CBC encryption and enable CTR or GCM encryption mode?

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva42141/?rfs=iqvred

Thank you.