# Host key verification failed - first run after Archer2 restart

**URL:** <https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072>\
**Category:** Uncategorized\
**Tags:** ARCHER2\
**Created:** [23 July 2023 21:57 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072 "2023-07-23T21:57:21Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [23 July 2023 21:57 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072/1 "2023-07-23T21:57:22Z")

</div>

Hi,

I’m trying to run u-cw305 but get the below error.

**[FAIL]** ssh -oBatchMode=yes -n [jweber@login.archer2.ac.uk](mailto:jweber@login.archer2.ac.uk) env\ ROSE\_VERSION=2019.01.3\ CYLC\_VERSION=7.8.12\ bash\ -l\ -c\ '"$0"\ "$@"'\ rose\ suite-run\ -vv\ -n\ u-cw305\ –run=run\ –remote=uuid=26640088-3813-4324-9221-885e032d8631,now-str=20230723T214333Z,root-dir='$DATADIR' # return-code=255, stderr=

**[FAIL]** Host key verification failed.

This is the first run I’ve tried since Archer2 came back on line - is there something I need to change on Puma?

Thanks,

James

---

<div class="post-metadata">

**Author:** ![RosalynHatcher](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/rosalynhatcher/32/11_2.png) [@RosalynHatcher](https://cms-helpdesk.ncas.ac.uk/u/RosalynHatcher)\
**Post date:** [24 July 2023 06:56 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072/2 "2023-07-24T06:56:44Z")

</div>

Hi James,

This is the change of host key when ARCHER2 was upgraded.

Run `ssh login.archer2.ac.uk` (and to each of the individual login nodes login[1-4].archer2.ac.uk) and remove ALL offending keys from your `~/.ssh/known_hosts` file. Keep doing this until you get the usual response.

```auto
ros@pumanew$ ssh login.archer2.ac.uk
PTY allocation request failed on channel 0
Comand rejected by policy. Not in authorised list
Connection to login.archer2.ac.uk closed.

```

Regards,  
Ros.

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [24 July 2023 14:45 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072/3 "2023-07-24T14:45:57Z")

</div>

Thanks, Ros. I was able to run `ssh login.archer2.ac.uk` and get the same result you posted. I cleared out the known\_host offending keys and I also ran ssh login[1-4].archer2.ac.uk - I didn’t get the same result as you posted (i.e. the PTY allocation…) - should I have done? The run does now start however.

However, all the build tasks fail with:

Lmod has detected the following error: The following module(s) are unknown:  
“cce/12.0.3”

Please check the spelling or version number. Also try “module spider …”  
It is also possible your cache file is out-of-date; it may help to try:  
$ module --ignore-cache load “cce/12.0.3”

Also make sure that all modulefiles written in TCL start with the string  
#%Module

I tried module --ignore-cache load “cce/12.0.3” in Archer2 but this just returned the above error message. I can see in site/archer2.rc the command module load “cce/12.0.3”. When I run module spider in Archer2 there is no sign of cce/12.0.3 but this is cce/15.0.0. Should I change 12.0.3 to 15.0.0 in site/archer2.rc?

Thanks,

James

---

<div class="post-metadata">

**Author:** ![RosalynHatcher](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/rosalynhatcher/32/11_2.png) [@RosalynHatcher](https://cms-helpdesk.ncas.ac.uk/u/RosalynHatcher)\
**Post date:** [24 July 2023 15:12 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072/4 "2023-07-24T15:12:25Z")

</div>

Hi James,

Yes you should get the standard PTY response I posted. What do you get?

You will also need to follow our instructions for updating suites following the ARCHER2 upgrade. You should have received an email from us after ARCHER2 returned to service. Details are available on our website (and on the announcement at the top of this page): [Updating a UM suite after the ARCHER2 O/S upgrade](https://cms.ncas.ac.uk/archer2/os-upgrade/)

Regards,  
Ros.

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [24 July 2023 16:07 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072/5 "2023-07-24T16:07:09Z")

</div>

Hi Ros,

The response I got for ssh login[1-4].archer2.ac.uk was:

-bash-4.2$ ssh [login4.archer2.ac.uk](http://login4.archer2.ac.uk)  
The authenticity of host ‘[login4.archer2.ac.uk](http://login4.archer2.ac.uk) (193.62.216.45)’ can’t be established.  
ECDSA key fingerprint is SHA256:SwK9bZr4Iigrkj/mvC/4GhwEF5oKYN/sveLzwE3LGnA.  
ECDSA key fingerprint is MD5:44:64:50:e7:8b:5c:11:5c:40:a1:b3:ff:0b:e7:a9:f4.  
Are you sure you want to continue connecting (yes/no)? yes  
Warning: Permanently added ‘[login4.archer2.ac.uk](http://login4.archer2.ac.uk),193.62.216.45’ (ECDSA) to the list of known hosts.  
Permission denied (publickey).

-bash-4.2$ ssh [login4.archer2.ac.uk](http://login4.archer2.ac.uk)  
Permission denied (publickey).

I’m currently in the US - could this be causing a problem?

Thank you for the link re the Archer2 upgrade. I will review it and make the necessary changes.

Cheers,

James

---

<div class="post-metadata">

**Author:** ![RosalynHatcher](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/rosalynhatcher/32/11_2.png) [@RosalynHatcher](https://cms-helpdesk.ncas.ac.uk/u/RosalynHatcher)\
**Post date:** [24 July 2023 16:28 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072/6 "2023-07-24T16:28:53Z")

</div>

Hi James,

It’s because you don’t have your `.ssh/config` set up quite right for it to use the correct key to login to individual login nodes.

```auto
Host login*.archer2.ac.uk <= missing *
User jweber
IdentityFile ~/.ssh/id_rsa_archerum
ForwardX11 no
ForwardX11Trusted no

```

Regards,  
Ros.

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [25 July 2023 14:05 UTC](https://cms-helpdesk.ncas.ac.uk/t/host-key-verification-failed-first-run-after-archer2-restart/1072/7 "2023-07-25T14:05:31Z")

</div>

Hi Ros,

That has all worked, thank you for your help.

Cheers,

James
