NSX pre-upgrade check fails with password expired error

Products

• VMware NSX

Issue/Introduction

• NSX pre-upgrade check failed with following error:

"Found an active alarm for an event which can impact upgrade. Feature: Password Management, Event Type: Password Expired, State: OPEN. Please perform the recommended action for the alarm and ensure that the alarm is no longer active."

• Password expiry alert reported for user "audit"
• Resetting the password from UI have the following error :

"Error: Invalid old_password specified. (Error Code :36147)

 

 

Environment

VMware NSX

Resolution

Reset the audit user password from command line.

• Log in to the appliance as root.
• To stop the MP Node API server daemon run the command /etc/init.d/nsx-mp-api-server stop
• To reset the password for audit, run the command passwd audit
• Run the command touch /var/vmware/nsx/reset_cluster_credentials
• To restart the MP Node API server daemon run the command /etc/init.d/nsx-mp-api-server start

Additional Information

To set the password expiration time in days, run the set user <username> password-expiration <number of days> command. Range is 1 to 1999.

For example:

nsx> set user audit password-expiration 120

To change the default number of days a user receives a warning message prior to their password expiration, run the set user <username> password-expiration-warning <password-expiration-warn-days> command. Default is 7. Range is 1 to 1999.

For example:

nsx> set user audit password-expiration-warning 14

To get password expiration information, run the get user <username> password-expiration command.

For example:

nsx> get user audit password-expiration

References : Resetting the Passwords of an Appliance and Manage Local User’s Password or Name Using the CLI