ONTAP 9 Manuals ( CA08871-402 )

If you want to enable FIPS mode on your cluster, existing SSH public key accounts without the supported key algorithms must be reconfigured with a supported key type. The accounts should be reconfigured before you enable FIPs or the administrator authentication will fail.

The following table indicates host key type algorithms that are supported for ONTAP SSH connections. These key types do not apply to configuring SSH public authentication.

For more information, see Configure network security using FIPS.

You must be a cluster administrator to perform this task.

If you have not associated a public key with the administrator account, you must do so before the account can access the SVM.

Associating a public key with a user account