NSX Manager and Edge Node Password Expiry set to 90 days
Article ID: 326341
Updated On:
Products
Issue/Introduction
Administrative passwords for NSX Manager and NSX Edge appliances expire after 90 days by default. If a password expires, management access to components is restricted until a reset is performed. This policy was introduced in VMware NSX-T 2.4.0 and higher.
- Active alarms in NSX UI indicating "Password Management" expiration.
- Inability to log in to Manager or Edge CLI/UI due to expired credentials.
Environment
- VMware NSX 3.x
- VMware NSX 4.x
Cause
Password expiration was introduced in NSX-T 2.4.0. By default, password expiration is configured for 90 days.
Resolution
To increase or disable the default password expiration policy for local users on NSX Manager or Edge Nodes, you can use the following CLI commands:
1. Disable password expiration:
- clear user {USERNAME} password-expiration
This removes the password expiry setting for the specified user, effectively disabling password expiration.
2. Set a custom password expiration (e.g., 9999 days):
- set user {USERNAME} password-expiration 9999
This sets the password expiration period to 9999 days for the specified user account.
Note: Replace {USERNAME} with the actual local user account name, such as admin or root.
These changes take effect immediately and persist across reboots but may need to be reapplied after future upgrades if password policies are reset.
Additional Information
Feedback
