If the host failed to connect to the NSX Manager within 2 hours after host preparation completed, its password expires.
This typically happens after fixing an issue preventing the ESXi host from connecting to the NSX Manager (after host prep). For example:
- vShield-Stateful-Firewall could not start.
- The socket was blocked by a physical firewall.
- The traffic was filtered by the ESXi firewall (maybe because the vSFW-UW ruleset was disabled).