Reconnecting a host to vCenter Server fails with the error: Rejected password for user vpxuser

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

Symptoms:

• Hosts show Disconnected status in vCenter Server.
• Attempting to reconnect a host to vCenter Server receives the error:
  A general system error: Timed out while waiting for vpxa to start
• The hostd.log on the host contains errors similar to:
  YYYY-MM-DDT<time>Z [353BBB90 info 'ha-eventmgr' opID=708C86E6-0000025E-1e] Event 7989 : Cannot login vpxuser@ipaddress</time>
  Rejected password for user vpxuser from ipaddress

Environment

• VMware vCenter Server 6.5.x
• VMware vCenter Server 6.7.x
• VMware vCenter Server 7.x
• VMware vCenter Server 8.x
   

   

   

Cause

This issue occurs when the cached password for vpxuser is incorrect on the host or the account has expired in vCenter.

 

 

 

Resolution

To resolve this issue, see KB: Host Summary page reports, Cannot synchronize host or Quick stats on <Hostname> is not up-to-date.

If this resolution is unsuccessful, update the vpxuser account on the host. To update the vpxuser account on the host:

1. Disconnect the host from the inventory within vCenter Server:
   Right click on the ESXi host in the Inventory. Click Disconnect.
2. Connect to the host through SSH and stop the vpxa service:
   /etc/init.d/vpxa stop
3. Delete the vpxuser:
   esxcli system account remove -i vpxuser
4. Start the vpxa service:
   /etc/init.d/vpxa start
5. Reconnect the host in vCenter Server.

 

 

 

Additional Information

If the host reconnect is failing, please refer to the KB article: ESXi host fails to reconnect to vCenter with the error 'The operation is not allowed in the current state'.