SDDC Pre-check fails at Backup user password validity with an error "check for password validity of backup user"

Products

• VMware Cloud Foundation
• VMware SDDC Manager

Issue/Introduction

• VCF Management domain pre-check failed at Backup user password validity with an error.

  Check for password validity of backup user

   
• Error in SDDC Manager UI
  
  
  
  
  

Environment

VMware Cloud Foundation

Cause

Backup user password is expired. Review lcm logs for specific credential and reason for execution failure.

Resolution

1. Take a snapshot of SDDC Manager VM
2. SSH to SDDC Manager with vcf and su to root
3. Verify backup user account ageing information

   change -l backup

   • If the backup user account password is expired, perform following steps or skip to Step # 4
     1. Switch to backup user account:

        su – backup

     2. Clear password history backup user account:

        echo “” > /etc/security/opasswd

     3. Set password for the backup user (password should be same as the backup user password when searched at lookup_passwords in SDDC Manager. : passwd < backup password from the lookup_passwords>
     4. Repeat step 3 to validate.
4. Validate entity id for the backup user and update it if required in SDDC manager database:
   1. Connect to SDDC manager platform database

      psql -h localhost -U postgres -d platform

   2. Check current entity id for BACKUP

      select * from credential where username='BACKUP';

   3. Compare BACKUP entityid with SDDC Manager id

      select * from sddc_manager_controller;

   4. If BACKUP entity id is different, update it

      update credential set entityid = '<sddc-manager-id>' where username='backup';

   5. Additionally, it's recommended to check VM name of the SDDC manager in platform database. If VM name of SDDC Manager in output is not matching with the VM name of SDDC Manager in the vCenter inventory, update it according to the VM name in the vCenter inventory, steps as follows:

      select * from sddc_manager_controller;
      update sddc_manager_controller set vm_name=<vm-name>;

       
   6. Exit from database: \q
5. Run pre-check on the SDDC manager UI. If pre-check is successful, proceed for the upgrade/migration.

Additional Information

This is a blocker for the Management domain upgrade.