Cannot change vCenter password in VMware vRealize Automation
search cancel

Cannot change vCenter password in VMware vRealize Automation

book

Article ID: 318360

calendar_today

Updated On:

Products

VMware Aria Suite

Issue/Introduction

This article provides information on how to successfully update the password on vCenter Server Cloud Account in vRealize Automation after its password was changed.

Symptoms:
  • vCenter Server Cloud Account username or password has been changed.
  • An existing endpoint in VMware vRealize Automation (Now VMware Aria Automation) needs to be updated with the new credentials.
  • Credentials validation is successful, but then you see the error:
Failed to connect to vCenter: Error: Cannot login due to incorrect username and password
  • The configuration fails to load and the endpoint cannot be saved.
  • Data collection and provisioning to this endpoint fails due to the invalid credentials.


Environment

VMware vRealize Automation 8.6.x

Cause

This issue occurs due to Provisioning Service passing the vSphere region enumeration adapter an authCredentialsLink, which points the adapter to the existing credentials in the inventory, rather than using the newly supplied username and password. Region enumeration fails and prevents the user from saving the endpoint.

Resolution

This issue is resolved in vRealize Automation 8.7, available at Broadcom Downloads.

Workaround:

To work around this issue if you do not want to upgrade, update the credentials using the IaaS API.

  1. Obtain an Authorization token from the vRA Cloud Services Console.
    1. Login to vRA UI using your administrative account
    2. Click the wrench icon to open Developer Tools
    3. Under Access Token Details click Options and Copy raw token
    4. In some cases you may not see the wrench icon on UI, then you can use the below kb to generate the bearer token: Generate an Access Token and Bearer Token in VMware Aria Automation for API Authentication
    • Note: Use this token as a Bearer token in your REST client
  2. Run the below GET API to fetch the affected cloud account ID 
    GET vra-hostname/iaas/api/cloud-accounts/?name%3D=vCenterEndpointName
Note: Replace vra-hostname with your vRealize Automation Fully Qualified Domain Name and vCenterEndpointName with the affected Cloud Account Name.

Sample using curl 
curl --insecure --location --request GET 'https://vra-hostname/iaas/api/cloud-accounts/?name%3D=vCenterEndpointName' --header 'Content-Type: application/json' --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ2MDg4NDM1NzUzNDg1ODI3MjcifQ.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.bXEjh85fDBEZoA3OM70-CQMPaZL4NNQLP_WK90nASXuajasJ2lea2d-24QQL4AjEwwLiLUgfjZA6iHKRlKcer-mhcXK3xLwoIg3XsDNqoG3l0mQAoyir50IjFIT-ti9i6q0sCLHnvx7-wGymSHM2isfmh-J9KeTSQwQUECbkDl7lryxcGtNB3Pf4_DxO6Ba9UuNxzaofzRohOAOFYTo9lXTyS21oGEjZ-YIT6XRfuxad09y9ik-VkUJiT0jOvkACIBqfwaMgGs8sxW083vKm-Yja3NeDv65Diq93M4x6QlQ3GLxHfwqW8ZmfH_9js0TxgKN4-ibcktGkVDYjfQTGyA' | python -m json.tool
  1. Take note of the cloudAccountId value from Step 2.
  2. Run below API to update the endpoint and credentials:
API 
PATCH {vra-hostname}/iaas/api/cloud-accounts/<cloudAccountId-from-step-2>
Body 
{
"privateKeyId": "username",
"privateKey": "new password"
}

Sample using curl

curl --insecure --location --request PATCH 'https://vra-hostname/iaas/api/cloud-accounts/<UUID_1>' --header 'Content-Type: application/json' --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjQ2MDg4NDM1NzUzNDg1ODI3MjcifQ.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.bXEjh85fDBEZoA3OM70-CQMPaZL4NNQLP_WK90nASXuajasJ2lea2d-24QQL4AjEwwLiLUgfjZA6iHKRlKcer-mhcXK3xLwoIg3XsDNqoG3l0mQAoyir50IjFIT-ti9i6q0sCLHnvx7-wGymSHM2isfmh-J9KeTSQwQUECbkDl7lryxcGtNB3Pf4_DxO6Ba9UuNxzaofzRohOAOFYTo9lXTyS21oGEjZ-YIT6XRfuxad09y9ik-VkUJiT0jOvkACIBqfwaMgGs8sxW083vKm-Yja3NeDv65Diq93M4x6QlQ3GLxHfwqW8ZmfH_9js0TxgKN4-ibcktGkVDYjfQTGyA' --data-raw '{
    "privateKeyId": "[email protected]",
    "privateKey": "<PASSWORD>"
}'
  1. Return to vRA UI, validate the vCenter credentials and save the endpoint.
  2. Verify that Data collection is completing successfully after a 10-minute cycle.
  3. Click Sync Images and UPDATE.



Powered by Wolken Software