Change in host key verifications during cluster communication in AsyncOS 11.x.x

[amelo@]

We are upgrading our cluster of ESAs (C190) from  version10.0.3-004 to 11.1.0.131

On the release notes it is mentioned that since 11.x.x during cluster communication, host key verifications are now performed  based on SSH-RSA only.

I remember that when adding each of the ESAs to the cluster we used SSH (never CCS) so I’m assuming I won’t need to add SSH keys to/from each one after the upgrade. Is this correct?

[Robert Sherwin]

You will want to clear and reset the host key from with-in logconfig > hostkeyconfig in order to have clustering sync properly.  Once you scan and add the key, it should automatically import the host keys back and resume cluster communication.

Cheers,

Robert