To activate or deactivate normal lockdown mode in

VMware Cloud Foundation

, you must perform operations through the vCenter Server. For information on how to activate or deactivate normal lockdown mode, see vSphere Security.

You can activate normal lockdown mode on a host after the host is added to workload domain.

VMware Cloud Foundation

creates service accounts that can be used to access the hosts. Service accounts are added to the Exception Users list during the bring-up or host commissioning. You can rotate the passwords for the service accounts using the password management functionality in the

SDDC Manager UI

.