The workaround we found was removing the dh algorithm
conn.KeyExchangeAlgorithms.Remove("diffie-hellman-group-exchange-sha256");
conn.KeyExchangeAlgorithms.Remove("diffie-hellman-group-exchange-sha1");> hms.