Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

[Mamoudou]

Hello team,

I have a problem with my export configuration Panorama via  scheduled task.

When I make a test SCP server connexion I have this mesage : 

Before upgrade to 10.2 the export was working fine.

I have also saw that PAN-188052 talk about this issue. Do you know how to fix it ? 

Could you help me please tu understand this problem.

Thank you in advance.

[sebblondeau]

Hi, I have the same trouble in 10.2.2-h2 ... Do you fix it?

[miguelMA]

Actually spent a few hours with TAC last night, bottom line, their is a work around, where they log into to root and delete the host/key folder and then you can try again to import the key through the article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HByDCAW

This this not work for me, and they are researching a possible workaround, if there is any.

They said it is a know issue and it is said to be fixed in 10.2.4.  we are running 10.2.3 and .4 is not available for download.

It seems the key the gui is looking for is the md5 "hex key word" but what you import is actually a alaphnumberic equivelant.

ive tried all kinds of combinations but have not gotten anywhere.

[jasonwald]

Thanks everyone for posting about this. Ran into the issue also immediately after upgrading Panorama to 10.2.3H2. This saves me a ticket since it appears there is no current fix.

[miguelMA]

unfortunately no, but they should be able to log into root and do the needful, like they did in my case.