Issue
Recently I needed to set up backups of a NSX-T Manager for a one time backup. I have performed the procedures shown in this link: I logged in with admin privileges to an NSX Manager at https://<nsx-manager-ip-address>. Selected System > Backup & Restore then Edit (in the upper right of the page to configure backups) and filled up all forms except the once regarding the SSH fingerprint of the server that stores the backups, because as indicated, I could leave it blank.
Doing so, I received the following error message:
- Please retry or provide the fingerprint.
Verify that you have the SSH fingerprint of the backup file server. Only an SHA256 hashed ECDSA key is accepted as a fingerprint. See Find the SSH Fingerprint of a Remote Server.
Solution
In case was not practicable to follow the instructions suggested in the link, is it possible to get the SSH Fingerprint of a Remote Server through a REST API request. Info about NSX-T Data Center API Guide regarding NSX-T Data Center 2.5.0 can be found here.
So, to fetch the SHA256 fingerprint of the SFTP backup target, in my case, I used the following CURL command:
curl --user admin -H 'Content-Type: application/json' --request POST https://<nsx-manager-ip-address>/api/v1/cluster/backups?action=retrieve_ssh_fingerprint -k -d '{ "server":"<Target-Backup-IP-Address>","port":22}'
The NSX-T Manager API responds with the SHA256 fingerprint of the SFTP server:
A very great post on configuring and troubleshooting NSX-T SFTP backups, wrote by Gary Hills is available here.
That's it.
Nessun commento:
Posta un commento