Configure the root User Password Expiration Policy for vCenter Server

Define the interval of time before the password of the
root
account of the vCenter Server appliances in
VMware Cloud Foundation
expires and a change is enforced.
Setting
Default Value
Password validity (days)
90
Email for expiration warning
-
Number of days of warning before password expires
7

Prerequisites

Configure the target vCenter Server instance with an email send account under
Settings
General
on the
Configure
tab in the vSphere Client.

UI Procedure

  1. Log in to the vCenter Server Management Interface at
    https://<vcenter_server_fqdn>:5480
    as
    root
    .
  2. In the navigation pane, click
    Administration
    .
  3. In the
    Password expiration settings
    section, click
    Edit
    .
  4. Configure the settings according to the requirements of your organization and click
    Save
    .
  5. Log in to the vCenter Server appliance console using SSH as
    root
    .
  6. Enable shell access.
    shell
  7. Change the number of days of warning before password expires value using the following command.
    chage --warndays <your_value> root
  8. Repeat this procedure for all VI workload domains.

PowerShell Procedure

  1. Start Windows PowerShell.
  2. Replace the values in the sample code and run the commands in the PowerShell console.
    $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io" $sddcManagerUser = "administrator@vsphere.local" $sddcManagerPass = "VMw@re1!" $sddcDomainName = "sfo-m01" $email = "admin@rainpole.io" $maxDays = "90" $warningDays = "7"
  3. Perform the configuration by running the command in the PowerShell console.
    Update-VcenterRootPasswordExpiration -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -email $email -maxDays $maxDays -warnDays $warningdays
  4. Repeat this procedure for all VI workload domains.