SSH Requirements for NAKIVO Backup and Replication
Product version: 11.1
Last modified: 19 August 2025
Question
What algorithms does NAKIVO Backup & Replication support to establish SSH connection?
Answer
To successfully establish SSH connection with NAKIVO Backup & Replication, the following SSH algorithms should be applied:
- 
                                                    Kex algorithms - 
                                                            diffie-hellman-group-exchange-sha256 
- 
                                                            diffie-hellman-group-exchange-sha1 
- 
                                                            diffie-hellman-group14-sha1 
- 
                                                            diffie-hellman-group1-sha1 
- 
                                                            curve25519-sha256 
- 
                                                            curve25519-sha256@libssh.org 
 
- 
                                                            
- 
                                                    Server host key algorithms - 
                                                            ssh-rsa 
- 
                                                            ssh-dss 
- 
                                                            rsa-sha2-512 
- 
                                                            rsa-sha2-256 
 
- 
                                                            
- 
                                                    Encryption algorithms client to server - 
                                                            aes128-ctr 
- 
                                                            aes192-ctr 
- 
                                                            aes256-ctr 
- 
                                                            blowfish-ctr 
- 
                                                            aes128-cbc 
- 
                                                            aes192-cbc 
- 
                                                            aes256-cbc 
- 
                                                            blowfish-cbc 
- 
                                                            3des-ctr 
- 
                                                            3des-cbc 
 
- 
                                                            
- 
                                                    Mac algorithms client to server - 
                                                            hmac-sha1-96 
- 
                                                            hmac-sha1 
- 
                                                            hmac-md5-96 
- 
                                                            hmac-md5 
- 
                                                            hmac-sha2-512 
- 
                                                            hmac-sha2-256 
 
-