Reset host root password with Host Profile

Products

• VMware vSphere ESXi

Issue/Introduction

• Unable to login ESXi host as password is unknown
• Unable to log into ESXi host with root password

Environment

• ESXi 7.x
• ESXi 8.x

Resolution

Notes

• The following steps can be done only if the ESXi host is connected to the vCenter. If this is not possible, the ESXi host will need to be reinstalled.
• This will only change the password per what is configured in the host profile and cannot be used to find an unknown password.
• There are no tools or methods to recover the original root password of an ESXi host.

Reset the ESXi host root password with Host Profiles

1. Login to the vCenter UI

2. Go to 'Home' > 'Policies and Profiles' > 'Host Profiles'

3. Click 'Extract profile from a host'

4. In the 'Extract Host Profile' wizard select the affected host

5. Name the Host Profile and click 'Next' > 'Finish'

6. Right-click the new Host Profile and click 'Edit Host Profile'

   

7. In the 'Edit Host Profile' wizard uncheck all boxes

8. Using the search filter, search for 'root'
   
   Alternatively, navigate to Security and services > Security setting > Security > User configuration > root.

9. Check the box for 'root'

10. In the 'Password' drop-down, choose 'Fixed password configuration' 

    1.  Password > Fixed password configuration > Set the new root password
       
       
       

    2. Ensure that the root option is checked before saving the changes to apply the new password configuration successfully.

11. Enter the new password and click 'Save'

12. Right-click the new Host Profile to open the 'Actions' menu. Choose 'Attach/Detach Hosts and Clusters...' and then select the host in the wizard.
    
    

13. Right-click the new Host Profile to open the 'Actions' menu. Choose ' Edit Host customization..

    Select the host which states Customization required, check the configurations and Finish [no changes needed]

14. Click the hamburger button in the upper left of the screen and select inventory.

15. Right-click the ESXi host in the inventory. The select Host Profiles > Remediate...

    **Caution**
    Un-select the "Automatically reboot hosts that require remediation" to avoid rebooting the host. A reboot is not required to implement this remediation.

    
    
    
    
16. To confirm success, right-click the host and select Host Profiles > Check Host Profile Compliance.
17. Delete the host profile once done.

Additional Information

To utilize the Host Profile feature, a vCenter Enterprise Plus License is required.