Configure the root User Password Expiration Policy for vCenter Server
Define the interval of time before the password of the
root
account of the vCenter Server appliances in VMware Cloud Foundation
expires and a change is enforced.Setting | Default Value |
---|---|
Password validity
(days) | 90 |
Email for expiration
warning | - |
Number of days of
warning before password expires | 7 |
Prerequisites
Configure the target vCenter Server
instance with an email send account under
General
on the Configure
tab in the
vSphere Client. UI Procedure
- Log in to the vCenter Server Management Interface athttps://<vcenter_server_fqdn>:5480asroot.
- In the navigation pane, clickAdministration.
- In thePassword expiration settingssection, clickEdit.
- Configure the settings according to the requirements of your organization and clickSave.
- Log in to the vCenter Server appliance console using SSH asroot.
- Enable shell access.shell
- Change the number of days of warning before password expires value using the following command.chage --warndays <your_value> root
- Repeat this procedure for all VI workload domains.
PowerShell Procedure
- Start Windows PowerShell.
- Replace the values in the sample code and run the commands in the PowerShell console.$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io" $sddcManagerUser = "administrator@vsphere.local" $sddcManagerPass = "VMw@re1!" $sddcDomainName = "sfo-m01" $email = "admin@rainpole.io" $maxDays = "90" $warningDays = "7"
- Perform the configuration by running the command in the PowerShell console.Update-VcenterRootPasswordExpiration -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -email $email -maxDays $maxDays -warnDays $warningdays
- Repeat this procedure for all VI workload domains.