Using WinSCP with the VMware vCenter Server Appliance

From time to time, you will find it necessary to transfer files to or from your VMware vCenter Server Appliance (VCSA) or ESXi Servers. If you are working from a Windows desktop or server, there’s no more convenient utility than WinSCP for copying files securely between Windows and Linux Systems.

There are a few issues, however, when it comes to connecting to the VCSA with WinSCP that I will show you how to work around without reconfiguring the default shell of your VCSA!

Getting WinSCP

Browse to: https://winscp.net to download the WinSCP Installation Package

Install WInSCP with a Commander Interface

Connecting to VCSA with WinSCP

If you try to connect to the VCSA with WinSCP in a default configuration, you will get the following message:

Received too large …. SFTP Packet ….. Cannot initialize SFTP protocol. Is the host running an SFTP server?

This occurs because the default shell for the VCSA 6.5 is not bash.

VMware KB 2107727 recommends changing the shell that the entire VCSA uses from /bin/appliancesh to /bin/bash prior to using WInSCP, then changing it back when you are done! This is a ridiculous waste of time and unnecessary re-configuration of the VCSA.

It is much more expedient just to reconfigure WinSCP and leave the VCSA the way it is! In order to use WinSCP, you will need to change where WinSCP looks for the sftp-server binaries.

In the new connection dialog, specify the Host name, User name and then click the Advanced button

The settings for VCSA 6.5 and VCSA 6.0 differ slightly so

for VCSA 6.5 and VCSA 8.X:

Choose the Environment/SFTP option

Specify for SFTP server: shell /usr/libexec/sftp-server

for VCSA 6.0:

Choose the Environment/SFTP option

Specify for SFTP server: shell /usr/lib64/ssh/sftp-server

And then save the settings (which include the SFTP server)

Now you should be able to login:

Accept the host key

Click: Never show this banner again

Enter the password for root

As soon as you connect, you will be in the root user folder which should be empty.

Navigate up one level in the right-hand pane of the interface

When you are at the root of the filesystem, you will see this:

And you can access any other folders from there, for example: /var/log

Connection to ESXi

Connecting to ESXi with ESXi 6.0 and ESXi 6.5 is pretty much default.

You don’t need to change any of the default variables, it should connect right away

Connecting to ESXi 5.X and prior will require you specify SCP in place of SFTP in the connection dialog.

Tags: , ,

About: John Borhek

John Borhek is the CEO and Lead Solutions Architect at VMsources Group Inc. John has soup-to-nuts experience in Mission Critical Infrastructure, specializing in hyper-convergence and Cloud Computing, engaging with organizations all over the United States and throughout the Americas.


38 thoughts on “Using WinSCP with the VMware vCenter Server Appliance”

  1. Thank you for putting this post together, John! I was stuck trying to get SCP to work with the VCSA in 6.5, and your post help me get through it with ease! Thank you!

  2. I couldn’t get it to work for me. The technician ended up doing something different on the server.
    https://vCenter Server FQDN or IP/appliance/support-bundle which allowed brought up a window, allowed me to authenticate, and then grab the files he needed. Obviously this only works with support files, but still.

  3. Hi John,

    I was trying to connect ESXi using WinSCP but get the message “access denied”. I setup a root password on ESXi but it didn’t work out…
    What may be the reason for that?

    Thanks

    Vlad

  4. Thank you very much for this after throwing away a chunk of the afternoon trying to transfer one file. Can confirm the 6.5 instructions work with 7.0.

  5. Awesome stuff. Thanks!
    You might consider say to TYPE the SFTP server protocol options as opposed to SPECIFY. (shell /usr/libexec/sftp-server) I thought it was in a dropdown and not requiring my manual entry. Took a few minutes to sort that out.

  6. Hi.
    Has anyone figured out how to change the Shell=default to the one in this article via winscp.exe command line?
    Thanks,

    MA

  7. Thanks! It’s funny how you know more than the guys who wrote the software. I often feel like VMware got in over their heads trying to create this vCenter Server Appliance.

Leave a Reply

Your email address will not be published. Required fields are marked *