Increased security in vRealize Operations Manager 7.0 and later

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• External sources (Authentication Sources, Adapter instances, etc.) using Diffie-Hellman (DH) key exchange with a key size below 2048 will fail to connect to vRealize Operations Manager.
• Previously working external sources will fail after an upgrade to vRealize Operations Manager 7.0.

Environment

VMware vRealize Operations Manager 7.0.x

Cause

vRealize Operations Manager 7.0 and later include increased security requirements for external sources.
The DH (Diffie-Hellman) minimum key size is now set to 2048.
RSA encrypted keys are not affected.

Resolution

To resolve this issue, upgrade the external source's DH key size to 2048 or higher.

Additional Information

Impact/Risks:
Connections using a DH key exchange with a key size below 2048 will fail to meet security requirements.