MOVEit Gateway ciphers are loaded from MOVEit Transfer each time the Gateway services are started. All cipher changes and updates are managed through MOVEit Transfer.

Note: You cannot configure the SSH Key Exchange or MAC algorithms to be used with MOVEit Gateway.
The KEX and HMAC algorithms enabled in MOVEit Gateway 2022.0.2, and later are:
  • KEX
    • ecdh-sha2-nistp521
    • ecdh-sha2-nistp384
    • ecdh-sha2-nistp256
    • diffie-hellman-group-exchange-sha256
  • MAC
    • hmac-sha2-256
    • hmac-sha2-512

For more information about SSH ciphers, KEX, or MAC algorithms, see SSH - Configuration (and IP address bindings).