Reconfigure SFTP Backups for SDDC Manager and NSX Manager

By default, backups of SDDC Manager and NSX Manager are stored in the SDDC Manager appliance. Change the destination of the backups to an external SFTP server.

Prerequisites

• The external SFTP server must support a 256-bit length ECDSA SSH public key.
• Only a user with the ADMIN role can perform this task. See Managing Users and Groups in VMware Cloud Foundation.
• You will need the SHA256 fingerprint of RSA key of the SFTP server.

Procedure

1. In the navigation pane, click Administration > Backup.
2. On the Backup page, click the Site Settings tab and then click Register External.
3. On the Backup page, enter the settings and click Save.

   To obtain the SSH Fingerprint of the target system to verify, connect to the SDDC Manager Appliance over ssh and run the following command:

   ssh-keygen -lf <(ssh-keyscan -p 22 -t rsa sftp_server_fqdn 2> /dev/null) | cut -d' ' -f2

   Setting	Value
   Host FQDN or IP	The FQDN or IP Address of the SFTP server.
   Port	22
   Transfer Protocol	SFTP
   Username	A service account with privileges to the SFTP server. For example: svc-vcf-bck.
   Password	The password for the username provided.
   Backup Directory	The directory on the SFTP server where backups are saved. For example: /backups/.
   SSH Fingerprint	The SSH Fingerprint is automatically retreived from the SFTP server, verify the SSH Fingerprint.
   Confirm Fingerprint	Selected
   Encryption Passphrase	The encryption passphrase used to encrypt the backup data. Note: The encryption passphrase should be stored safely as it is required during the restore process.

4. In the Confirm your changes to backup settings dialog box, click Confirm.