The SCP agent uses a file with known host keys to validate the server identity during connection setup. The location and naming of this file is managed through the property:

mz.ssh.known_hosts_file

It is set in the <pico name>.xml file of the relevant EC to manage where the file is saved. The default value is ${mz.home}/etc/ssh/known_hosts.

The SSH implementation uses JCE (Java Cryptography Extension), which means that there may be limitations on key sizes for your Java distribution. This is usually not a problem. However, there may be some cases where the unlimited strength cryptography policy is needed. For instance, if the host RSA keys are larger than 2048 bits (depending on the SSH server configuration). This may require that you update the Java Platform that runs the EC.

The OpenJDK JRE does not require special handling of the JCE policy files for unlimited strength cryptography.