CWS/CMS: CDT Service Desk Bulletin - SAFE Cloud Service Scheduled Maintenance

Subject: SAFE Cloud Service Scheduled Maintenance – Monthly Patching

Reference Number:

CHG0092569

Event Date/Time:

08/22/2026 @ 08:00 PM

Start Date/Time:

08/22/2026 @ 08:00 PM

End Date/Time:

08/23/2026 @ 02:00 AM

Summary: SAFE Cloud service – scheduled maintenance and retiring of SSH cryptographic algorithms

Action Requested:

• All users currently using the SSH cryptographic algorithms listed below when connecting to SAFE must test their connection higher cipher prior to 08/22/26.
• All users not familiar with ciphers or do not have access configuring ciphers, please reach out to your IT support for assistance.
• All users should logoff of the SAFE Cloud service prior to the start of the stated maintenance timeframe.

Who is Affected: All users of the SAFE Cloud service

What to Expect:

• SAFE Cloud service will be unavailable during the stated maintenance timeframe
• As part of our ongoing commitment to security and compliance with industry best practices, we will be disabling the following SSH cryptographic algorithms

SSH Cipher Suites:

3des-ctr, arcfour, arcfour128, arcfour256

SSH MAC:

hmac-md5, hmac-md5-96, hmac-md5-etm@openssh.com, hmac-sha1, hmac-sha1-96, hmac-sha1-etm@openssh.com

SSH Key Exchange Algorithms:

diffie-hellman-group14-sha1, diffie-hellman-group1-sha1, diffie-hellman-group-exchange-sha1, rsa1024-sha1

SSH Public Keys:

ssh-dss, ssh-dss-cert-v01@openssh.com, ssh-rsa, ssh-rsa-cert-v01@openssh.com, x509v3-sign-dss, x509v3-sign-rsa, x509v3-sign-rsa-sha1, x509v3-ssh-dss, x509v3-ssh-rsa

• Effective 08/23/2026, connection to SAFE using the retired SSH cryptographic algorithms will fail