NSX-T admin password expired in PKS

Products

• VMware Tanzu Kubernetes Grid Integrated Edition

Issue/Introduction

Password expiration is configured for 90 days by default. This was introduced in NSX-T 2.4.0 due to security requirements.

NSX-T 2.4.0 Password Policy Enhancements enforce a minimum password length of 12 characters for default passwords. It also introduces the ability to set password expiration times and generates alarms when the password is about to expire.

For more details, please refer to VMware NSX-T Data Center 2.4 Release Notes. 

Environment

Cause

 

Impact and Risks

• Once the password expires, you will not be able to log in and manage NSX-T components.
• Tasks or API calls which require an NSX-T Admin password for execution will fail.
• The UI does not provide warnings about password expiration.
• You may be unable to create new clusters in PKS.

For more information, refer to this VMware Knowledge Article: https://kb.vmware.com/s/article/70691

Note: Please be aware that this issue can also impact Pivotal Application Service (PAS) when used in conjunction with NSX-T. The symptoms will be slightly different but the resolution is the same.