When a remote SAS/CONNECT spawner and the SAS/CONNECT client use different network encryption algorithms, the sign-on fails with the following error:

The SAS/CONNECT spawner can be configured to use multiple network encryption algorithms to allow SAS/CONNECT clients using different algorithms to sign on. See the "NETENCRYPTALGORITHM System Option" section in Encryption in SAS^® 9.4, Sixth Edition for details about the NETENCRYPTALGORITHM option syntax and the "Options for Starting and Managing the SAS/CONNECT Spawner" section in the Communications Access Methods for SAS/CONNECT^® 9.4 and SAS/SHARE^® 9.4, Second Edition for SAS/CONNECT spawner options.

However, for a SAS/CONNECT server that is part of a SAS metadata environment, you cannot specify multiple values for the NETENCRYPTALGORITHM= system option. This system option is set via SAS^® Management Console in the SAS/CONNECT server properties, and only one value is allowed.

If you need to support multiple network encryption algorithms for a SAS/CONNECT server that is part of a SAS metadata environment, use the following temporary workaround:

1. Edit the ConnectSpawner_usermods.sh file in the following way:
   • Set the NETENCRALG value to the multiple network encryption algorithms that you need.
   • Add the -SERVICE PARM to a TCP port that has not been used already.
   • Add the -SASCMD PARM (copy it from the current launch command in the metadata).
   Here is an example:
   USERMODS_OPTIONS="-netencralg '(AES,SASPROPRIETARY)' -service <different tcp port> 
   -sascmd <launch command copied from ConnectServer specified in metadata> "
2. Stop and restart the SAS/CONNECT spawner.
3. Sign on using the new port.

Operating System and Release Information