Bug ID 2163677: K3s install fails if a weak SSH MAC algorithm is configured

Last Modified: Dec 12, 2025

Affected Product(s):
F5OS F5OS-A, Install/Upgrade(all modules)

Known Affected Versions:
F5OS-A 1.8.0, F5OS-A 1.8.3

Opened: Dec 02, 2025

Severity: 3-Major

Symptoms

If a weak SSH MAC algorithm is configured (via "system security services service sshd"), K3s will fail to install.

Impact

This can prevent upgrades or K3s reinstallations.

Conditions

-- Appliance. -- Weak SSH MAC algorithm configured.

Workaround

Configure a strong SSH MAC algorithm, e.g. hmac-sha2-256. In the CLI: config system security services service sshd config macs [ hmac-sha2-256 ] commit It is possible to configure multiple MAC algorithms, in which case the administrator should keep the stronger algorithms enabled as well.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips