Password expiration approaching alarm NSX

Products

• VMware NSX

Issue/Introduction

Event ID: password_management.password_expiration_approaching

Alarm Description:

• Purpose: Reporting password expiration of node local user account is approaching as per the configured NSX password policy.

Environment

VMware NSX-T Data Center
VMware NSX

Cause

User password is approaching expiration.
When event detected: "The password for user {username} is approaching, event will be triggered

Resolution

This is an event that may occur in a VMware NSX environment

Note: Maintenance window required for remediation? No

 

Recommended Action:

For version 3.0.0 and higher

 

• When alarm password_management.password_expiration_approaching is raised, user will be notified with the following message:
  
  The password for user {username} is approaching expiration in {password_expiration_days} days.

  
  
• In order to address this alarm, updating password for user account is required.
  
  Password of user account can be changed via different methods:
  
  
  1. 1. Using NSX UI
        1. Login to NSX UI and navigate to tabs System > User Management
        2. Under User Management table select section Local Users
        3. From the list of local user accounts, click the menu icon (3 dots) for the respective user and choose Change Password.
     2. Using NSX CLI
        1. Login to NSX CLI using console or SSH into appliance via user credentials
        2. Execute following command into NSX CLI prompt
           
           set user <username> password
           
           
     3. Using API
        
        Invoke following API with valid request body, to reset the password of user account
        
        [PUT] /api/v1/node/users/<userid> where <userid> is the ID of the user.

Refer to the NSX API guide for more information.

 

• Once password is updated for the user, alarm is resolved with following message:
  
  The password for the user {username} has been changed successfully or is no longer expired or the user is no longer active.

 

Additional Information

3.2 Admin Guide
4.2 Admin Guide