WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! displays when SSH into Platform node of Aria Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

Upon login to a Platform node you see the below warning message on using SSH:

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)!

It is also possible that a host key has just been changed.

The fingerprint for the ECDSA key sent by the remote host is

SHA256:ROwJsxxxxxxxxxxxxxxxxxxxxxxxxxxxxx30.

Please contact your system administrator.

Add correct host key in /root/.ssh/known_hosts to get rid of this message.

Offending ECDSA key in /root/.ssh/known_hosts:1

  remove with:

  ssh-keygen -f "/root/.ssh/known_hosts" -R "platform1"

Password authentication is disabled to avoid man-in-the-middle attacks.

Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.

Environment

Aria Operations for Networks 6.10
Aria Operations for Networks 6.11
Aria Operations for Networks 6.12
Aria Operations for Networks 6.13
Aria Operations for Networks 6.14

Cause

The Host key has been replaced by the remote host with different ECDSA key.

Resolution

Follow the instructions below to resolve the issue:

1. Login to Platform node 1 as 'support'user.
2. Type 'ub' for ubuntu mode. 
3. Run the following command: sudo /home/ubuntu/run_all.sh "sudo rm -f /home/ubuntu/.ssh/known_hosts /root/.ssh/known_hosts /home/support/.ssh/known_hosts"

 

The above command needs to run only on the Platform1.