Description:
When trying to do a test connection for TIBCO ActiveMatrix BusinessWorks Plug-in for sFTP (sFTP) shared connection pallet or running a process with sFTP pallets, it fails with the error "Algorithm negotiation failure".

Symptoms:
The error "Algorithm negotiation fail" seen on a test connection of shared connections and when running TIBCO ActiveMatrix BusinessWorks (BW) process with TIBCO ActiveMatrix BusinessWorks Plug-in for sFTP (sFTP) pallets, it fails with the error "Algorithm negotiation fail".
Cause:
There are a couple of places that SSH clients/sFTP client and servers try and agree on a common implementation. The server and client produce a list of available options and then the best available option in both lists is chosen. If there is no acceptable option in the lists, it fails with the error "Algorithm negotiation fail". By default, JSch accepts only, aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc . JSch does support both aes256-cbc and aes192-cbc but requires JCE (Java Cryptography Extension) to allow them. You probably do not have JCE so these ciphers are not available.

Product: TIBCO ActiveMatrix BusinessWorks Plug-in for sFTP Version: 1.0,1.1.x OS: All Supported Operating Systems --------------------

Verify that you JAVA/JRE versions and download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files from the following location.

For JRE 8:

http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

For JRE7:

http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

FOR JRE6:

http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html

*****
1).  Download the unlimited strength JCE policy files.

2).  Uncompress and extract the downloaded file.

    This will create a subdirectory called jce.
    This directory contains the following files:
            This file
        local_policy.jar             Unlimited strength local policy file
        US_export_policy.jar         Unlimited strength US export policy file

3).  Install the unlimited strength policy JAR files.

In case you later decide to revert to the original "strong" but limited policy versions, first make a copy of the original JCE policy files (US_export_policy.jar and local_policy.jar). Then replace the strong policy files with the unlimited strength versions extracted in the previous step.

The standard place for JCE jurisdiction policy JAR files is:

        <java-home>/lib/security           [Unix]
        <java-home>\lib\security           [Windows]
****

Selecting the Test Connection button Connection will establish this successfully.

Algorithm Negotiation Failure error with TIBCO ActiveMatrix BusinessWorks Plug-in for sFTP.