HOW TO remove Weak SSH ciphers in UCS Fi 6324

[jlanuza]

Hello everybody,  Do you have a method to remove weak ciphers for SSH protocol in UCS fabric interconnector 6324 mini,  i have just the option to enable or disable SSH but not to configure ciphers, macs, e curves,  or some documentation that should clarify our Security deparment.

Thanks in advanced

[Kirk J]

https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/4-2/b_Cisco_UCS_Admin_Mgmt_Guide_4-2/m_ucs_manager_communication_services.html

Sounds like maybe you need to upgrade the UCSMini to a later version (i.e. 4.2) that allows the cipher config.

Kirk...

[Riaan van Niekerk]

The page you linked to, only provides notes on setting the HTTPS/SSL ciphers, not the SSH ones?

[Steven Tardy]

TAC opened CDET a few months ago regarding this issue:

CSCwh79071 :: Deprecated SSH cryptographic settings 

The CDET has been changed from a Sev 3 to a Sev 6 (enhancement) by UCS engineering.

The best thing to do is open a Cisco TAC case and have TAC attach the TAC case to the CDET.
(Without doing this attachment, then this enhancement will likely never be prioritized and resolved. )