Symptoms:
-- Host Preparation or transport node creation fails during new installation or an upgrade
-- During a host VIB upgrade, the upgrade is stuck at "Copying NSX bits to host" and times out after several hours with Error "Permission Denied"
-- In the upgrade-coordinator.log, you see the following error a few hours after the upgrade commenced
2018-11-05 21:31:49.721 UTC INFO task-executor-0-workitem-HOST-6294251a-357f-4241-937b-2a6d398556c2 ExecutionMonitorServiceImpl:49 - SYSTEM [nsx@6876 comp="nsx-manager" subcomp="upgrade-coordinator"] Execution monitor service invoked to react to failure of node 6294251a-357f-4241-937b-2a6d398556c2 [No Permission to perform the operation on host https://10.252.25.15/sdk. Please check the Lockdown mode of the host.]
This is a known issue and addressed in the NSX-T 2.3 Release notes
Issue 1588682: Putting ESXi hosts in lockdown mode disables the user nsx-user