Qualys vulnerability SSH server public key too small for NetApp FAS and AFF SANs

This is a quick post on how to address the Qualys vulnerability SSH server public key too small for NetApp FAS and AFF SANs.  Described in this article 

First run the below to see the current security configuration:

security config show

Now run the below to enable fips and accept the x3 prompts:

security config modify -interface SSL -is-fips-enabled true

Run security status show command again and you will see you need to reboot both nodes

The easiest way to do this in a cluster is to login to the NetApp OnCommand Manager and go to High Availability under the cluster settings.  Lets reboot node 2 first by selecting the option under node 1 to take over node 2

Click Takeover

The process starts

Node 2 goes offline while it is rebooted

Continue to wait – although it gives the option to giveback do not click this

Great, looks like all was successful! Node 2 was rebooted and back online.  You can re-home interfaces by going to Network>Interfaces>Send to home

Start the process again but this time to reboot node 1, so elect node 2 and click take over node 1

Again click Takeover

Continue to wait

Node 1 goes offline

Wait until you see the message where nodes can take over before successful

Run another security config show to see if the reboot is still needed. If not all is completed