Symptom
no matching host key type found, when adding host key for the SFTP server in ISE CLI or when ssh from ISE CLI to the external server. Additionally, the command crypto host_key add is not adding it correctly.
As a result, we are unable to use such server as an SFTP repository.
Conditions
An external server with a newer OpenSSH version, e.g., Federa 35, where this is recreated, has OpenSSH 8.7p1, OpenSSL 1.1.1l FIPS 24 Aug 2021.
Workaround
Use other SFTP servers that still allowing ssh-rsa as the HostKeyAlgorithms or other repository protocols.
Or, contact Cisco TAC
Further Problem Description