CMC/SCC fail to push upgrade images to FIPS mode SteelHead running 9.6.0 and 9.6.0a .

Categories:

SteelHead DX (Appliance), SteelHead (Appliance), SteelCentral Controller for SteelHead (Central Management Console), SteelHead EX (Appliance)

Solution Number:

S30558

Last Modified:

2017-05-04

Issue

CMC/SCC fail to push upgrade images to FIPS mode SteelHead running 9.6.0 and 9.6.0a. This will prevent Steelhead upgrades from 9.6.0+, to future versions, using the SCC.

Solution

This is a known issue tracked as Bug#282285. In summary due to this bug, ssh client and sshd server running on these boxes may negotiate FIPS-disallowed cipher curve25519. FIPS closes such connection resulting in connection failure. Fix for this bug will be included RiOS 9.6.0b (ETA 1st week of June, 2017).

Workaround: Disable FIPS on steelhead during RiOS upgrade from SCC/CMC.

Fix it by upgrading to RiOS 9.6.0b.(ETA 1st week of June, 2017)

Environment

RiOS 9.6.0 and 9.6.0a

Related Bugs

Attachments

Related Files

NOTICE: Riverbed® product names have changed. Please refer to the Product List for a complete list of product names.

Can't find an answer? Create a case