6.2 Reconfiguring Secure Shell Ciphers

In Access Manager 4.3 fresh install, the SSH server is configured only with strong ciphers. However, in an upgraded setup, you should reconfigure SSH to remove the weak ciphers.

Perform the following steps:

  1. In /etc/ssh/sshd_config (server) and /etc/ssh/ssh_config (client), search for Ciphers. The following is the default configuration:

    # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc

  2. Uncomment this line and replace it with the following value:

    Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc

  3. Restart SSH by running the service sshd restart command.