How to Rotate supervisor control plane VM password

Products

• VMware vSphere ESXi
• VMware vSphere with Tanzu

Issue/Introduction

Supervisor Control plane VM password is not auto-rotated by WCP and if there is a requirement to rotate this you can follow the steps outlined in this article

Symptoms:
NA

Environment

VMware vSphere 7.0 with Tanzu

Cause

NA

Resolution

We need to get the api session ID & Cluster ID to make this API request: 

How to get the cluster id (.i.e - Domain-xx)-:

• ssh to vcenter
• Open dcli cmd:-  dcli +interactive +server <vcenter IP> +skip-server-verification
• Run cmd :- vcenter namespaces namespaceselfservice list  >> it will give the cluster name like below:-

dcli> vcenter namespaces namespaceselfservice list
|---------|----------|-----------|
|cluster  |capability|status     |
|---------|----------|-----------|
|domain-c8|SUPPORTED |DEACTIVATED|
|---------|----------|-----------|

• Exit the dcli cmd

How to get the api session id:-

• Login to vCenter UI go to Menu->Developer Center->API Explorer
• Expand cluster and run the below API specifying cluster name:-   
• Enter the cluster name and execute the api:-    

Once you have the session id modify the below command by updating the cluster ID and session ID and run it:

 curl -X POST -H "vmware-api-session-id:xxxxxxx" https://<vcenter IP>/api/vcenter/namespace-management/clusters/domain-xx?action=rotate_password --insecure

For more information on API you can refer to this doc https://developer.broadcom.com/xapis/vsphere-automation-api/latest/vcenter/api/vcenter/namespace-management/clusters/clusteractionrotate_password/post/       

Additional Information

Impact/Risks:
NA