Unable to remotely install JBoss ON agent due to failure to find matching key exchange algorithm

Solution Verified - Updated -


  • Cannot install agent due to ssl error
  • target machine includes below message in /var/log/messages:

    fatal: Unable to negotiate with port 45748: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1 [preauth]
  • JBoss ON server.log contains error similar to:

    ERROR [org.jboss.as.ejb3.invocation] (http- JBAS014134: EJB Invocation failed on component RemoteInstallManagerBean for method public abstract void org.rhq.enterprise.server.install.remote.RemoteInstallManagerRemote.checkSSHConnection(org.rhq.core.domain.auth.Subject,org.rhq.core.domain.install.remote.RemoteAccessInfo) throws org.rhq.core.domain.install.remote.SSHSecurityException: javax.ejb.EJBException: java.lang.RuntimeException: Failed SSH connection
    Caused by: java.lang.RuntimeException: Failed SSH connection
    Caused by: com.jcraft.jsch.JSchException: Algorithm negotiation fail
    at com.jcraft.jsch.Session.receive_kexinit(Session.java:583) [jsch-0.1.51.jar:]
    at com.jcraft.jsch.Session.connect(Session.java:320) [jsch-0.1.51.jar:]
    at org.rhq.enterprise.server.install.remote.SSHInstallUtility.connect(SSHInstallUtility.java:216) [rhq-server.jar:4.12.0.JON330GA-redhat-7]
    ... 107 more


  • Red Hat JBoss Operations Network (ON) 3.3
  • remote installation of agent through UI's SSH utility

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.