The SSH transport layer handles algorithm negotiation between the server and client over TCP/IP. Negotiation begins when the SSH client and server send each other textual information that identifies their SSH version. If they both agree that the versions are compatible, the client and server exchange lists that specify the algorithms that they support for key exchange, encryption and data integrity via a message authentication code (MAC). These lists are protected by their own encryption algorithms. The Mac Algorithms in the left column are available, the ones in the right column are enabled.
Perform the following steps to enable Mac Algorithms:
On the left side of the page, select the Mac Algorithm that you want to enable. Multiple entries can be selected by pressing the Ctrl or Shift key while clicking the mouse.
The following entries are set as defaults in
Managed File Transfer
:
hmac-sha2-512-etm@openssh.com
hmac-sha2-512-96
hmac-sha2-512
hmac-sha2-256-etm@openssh.com
hmac-sha2-256
hmac-sha2-256-96
hmac-sha1-etm@openssh.com
hmac-sha1
hmac-sha1-96
hmac-md5
hmac-md5-etm@openssh.com
hmac-md5-96
After upgrading to
Managed File Transfer
10.5.0 version, a warning message appears with a list of unsupported algorithms if they were selected before upgrade. You must save the configuration to proceed. Saving the configuration deletes the unsupported algorithms.
The
Managed File Transfer
10.5.0 version does not support the following algorithms:
hmac-sha256@ssh.com
hmac-sha256
hmac-sha512
hmac-sha512@ssh.com
hmac-ripemd160
hmac-ripemd160@openssh.com
hmac-ripemd160-etm@openssh.com
Click the
arrow between the group boxes to move the algorithms from left to right.
Perform the following steps to disable Mac Algorithms:
On the right side of the page, select the Mac Algorithm that you want to disable. Multiple entries can be selected by pressing the Ctrl or Shift key while clicking the mouse.
Click the
arrow between the group boxes to move the algorithms from right to left.