Network Management

Remove ssh-dss from host key algorithms in SCP/SFTP Server

How to remove support for ssh-dss in the SCP Server?

First published date

7/4/2024 9:36 AM

Last published date

7/3/2025 10:47 PM

Overview

Occasionally, security scanners might highlight the use of algorithms, like ssh-dss or ssh-rsa, using less secure keys (e.g. 1024-bit long). This article provides a workaround, which is based on the removal of algorithms from the set of supported algorithms.

Product section

Network Configuration Manager

Resolution

If you do not use the ssh-dss algorithm, you can suspend the use of it by the SCP Server. To do so, follow the steps below:
  1. Login to the server where the SCP Server is running.
  2. Open SolarWindsSftpServer.exe.config file (default location: c:\Program Files (x86)\SolarWinds\SFTP & SCP Server\) in a text editor.
  3. Find <value>rsa,dss</value> and change it to <value>rsa</value>.
  4. Restart the SCP Server service.
  5. Run a security scanner to verify.