CMC/SCC fail to push upgrade images to FIPS mode SteelHead running 9.6.0 and 9.6.0a .

Categories: SteelCentral Controller for SteelHead (Central Management Console), SteelHead (Appliance), SteelHead DX (Appliance), SteelHead EX (Appliance)
Solution Number: S30558

Issue

CMC/SCC fail to push upgrade images to FIPS mode SteelHead running 9.6.0 and 9.6.0a. This will prevent Steelhead upgrades from 9.6.0+, to future versions, using the SCC.

Solution

This is a known issue tracked as Bug#282285. In summary due to this bug, ssh client and sshd server running on these boxes may negotiate FIPS-disallowed cipher curve25519. FIPS closes such connection resulting in connection failure. Fix for this bug will be included RiOS 9.6.0b (ETA 1st week of June, 2017).

Workaround: Disable FIPS on steelhead during RiOS upgrade from SCC/CMC.

Fix it by upgrading to RiOS 9.6.0b.(ETA 1st week of June, 2017)

 

Environment

RiOS 9.6.0 and 9.6.0a
NOTICE: Riverbed® product names have changed. Please refer to the Product List for a complete list of product names.
Last Modified: 2017-05-04
Can't find an answer? Create a case