Unable to upload CAAR script or login to NSX Manager via SFTP/SCP using 'admin' account
Article ID: 431309
Updated On:
Products
Issue/Introduction
When attempting to upload the CAAR (Customized Automated Assessment Report) script or other files to an NSX Manager appliance via SFTP or SCP, the connection is rejected or access is denied despite using valid credentials for the admin user.
SFTP/SCP client reports "Permission denied" or "Authentication failed".
SSH connections for the admin user successfully reach the NSX CLI but fail to initialize a file transfer session.
The admin user is restricted to the NSX-T/NSX CLI shell, which does not support the internal subsystems required for SFTP.
Environment
VMware NSX
Cause
The admin account is restricted to a non-POSIX shell (NSX CLI). SFTP and SCP protocols require a functional bash shell to initiate file transfers, which is only granted to the root user on NSX Manager appliances.
The admin user can only be used for API-based file operations or local CLI commands; it cannot browse the Linux file system.
Resolution
Connect to the NSX Manager using an SFTP/SCP client (e.g., WinSCP, FileZilla, or native scp command).
Enter the NSX Manager FQDN or IP address.
Use the root username and the password configured during deployment or via the CLI.
If root login is denied via SSH, verify that SSH root login is enabled:
- Log in to the NSX CLI as admin.
- Check SSH settings: get service ssh.
- If disabled, start the service: start service ssh.
- To allow root login specifically, ensure the /etc/ssh/sshd_config on the manager has PermitRootLogin yes (requires console access to modify if SSH is restricted).
Additional Information
Feedback
