Changes to the sshd_config file that might require a migration action

Table 1 lists the changes to the sshd_config file that might require a migration action and the accompanying actions.

Table 1. Changes to the sshd_config file that might require a migration action
What changed Migration action needed?

The RhostsAuthentication keyword

Previously, this option was supported for protocol version 1. Now, this option is no longer supported for protocol version 1 on z/OS Unix.

Yes, if you use RhostsAuthentication for protocol version 1 in your application. When setting it, the following message is returned: FOTS2374 filename line line_number: Deprecated option keyword” is returned.

Action: Update your application.

The ServerKeyBits keyword

Previously, the default number of bits in the ephemeral protocol version 1 server key was 768. Now, the default number of bits in the ephemeral protocol version 1 server key is 1024.

Yes, if you use the ephemeral protocol version 1 server key which is 768 bits.

Action: Start the sshd daemon with specifying -b 768, if you want to use the old default.