A mis-alignment exists between password strength requirements in the VA deployment window and the Operating System (OS) password management. The deployment window has lax requirements for password strength, whereas the OS has stricter requirements. This mis-alignment can result in user-supplied password that is not sufficiently strong, according to OS requirements, to be accepted and subsequently rejected during first boot, resulting in a randomly generated password set for the root user.