Unable to connect to SecureCRT version - Key exchange failed. No compatible key exchange method

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

Customer reported that  upgrade to PAM 3.3,  users are  unable to use SecureCRT Version 7.1.3. Here is the error message: "Key exchanged failed No compatible key exchange method"

Environment

Release : 3.3

Component : PRIVILEGED ACCESS MANAGEMENT

Cause

SecureCRT is a GUI-based telnet client and terminal emulator . This is not a PAM issue but a SecureCRT configuration issue as SecureCRT has not been configured  to use any ciphers or key exchange methods that the remote server supports.

 

Resolution

Not a PAM configuration or code issue.  Customer acquired the latest version of  SecureCRT (Version 8.0 at the writing of this article and then ensured that SecureCRT is configured  for ciphers that remote servers support. 

Additional Information

In SecureCRT's connection dialog the Ciphers supported by Remote Host needs to be enabled to overcome this issue. S