NSX-T Manager and Edge Node Password Expiry set to 90 days

Products

• VMware NSX

Issue/Introduction

By default, the administrative password for the NSX Manager and NSX Edge appliances expires after 90 days. However, you can reset the expiration period after initial installation and configuration.
If the password expires, you will be unable to log in and manage components.

Environment

VMware NSX

Cause

Password expiration was introduced in NSX-T 2.4.0. By default, password expiration is configured for 90 days.

Resolution

To increase or disable the default password expiration policy for local users on NSX-T Manager or Edge Nodes, you can use the following CLI commands:

1. Disable password expiration:

• clear user {USERNAME} password-expiration

This removes the password expiry setting for the specified user, effectively disabling password expiration.

2. Set a custom password expiration (e.g., 9999 days):

• set user {USERNAME} password-expiration 9999

This sets the password expiration period to 9999 days for the specified user account.

Note: Replace {USERNAME} with the actual local user account name, such as admin or root.

These changes take effect immediately and persist across reboots but may need to be reapplied after future upgrades if password policies are reset.

Additional Information

Modifying the Default Admin Password Expiration

NSX-T admin password expired

Resetting the Passwords of an Appliance