NSX-T 3.1 - Backup fails "configured fingerprint did not match fileserver sftp://...ip.../..folder..

[vRon]

fingerprint has been copied according to "Find the SSH Fingerprint of a Remote Server"

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-8F3D860E-4F01-452E-A54D-...

which is nothing special:

ssh-keygen -lf /etc/ssh/ssh_host_ecdsa_key.pub | awk '{print $2}'

Server-IP is fine, copy and paste errors have been checkt dozen times.

* SFTP with any other client works.

since, when I change the IP-Address for the SFTP-Server in the NSX-T GUI to an not existing IP... I get:

The credentials were incorrect or the account specified has been locked.

I tend to stop to trust the NSX-T-Managers error-message.

Idea:

* the Server-Key contains a "/"-character - maybe it has to be escaped?

[lwilliams1990]

I'm seeing the same issue on NSX-T 3.2.1.1.0.20115686

Were you able to find a solution in the end?

[vRon]

yes - hard to believe but our solution - together with VMware TAC - was:

* redeploy first NSX-T Manager virtual Appliance [which was initially deployed from an OVA]

[TomasHak]

yes, it is hard to believe ... I had the same problem and cannot solve it quickly, but after some tests:

how I retrieved SHA256:xx..xx?

1) in vCenter click on your NSX appliance, in my case: nsx-unified-appliance-4.1.1.0.0.22226215

2) open console

3) login as admin

4) enter engineering mode by command (and password for nsx root): st en

5) test ssh by command: ssh -l admin 10.50.50.250

it gave me a fingerprint that i didn't see before (putty, winscp etc....), I rewrite that into "SSH Fingerprint" and it finally works!