Password is about to expire alarm

Products

• VMware NSX

Issue/Introduction

Title: Alarm for Password Is About To Expire
Event ID: password_management.password_is_about_to_expire

Alarm Description:

• Purpose: Reporting password expiration of node local user account is about to expire as per the configured NSX password policy.

Environment

VMware NSX-T Data Center
VMware NSX

Cause

NSX local users are expected to change their passwords as per the configured NSX password policy.

Resolution

Steps to resolve
For version 3.0.0 and higher

Recommended Action:

• When alarm password_management.password_expiration_approaching is raised, user will be notified with following message:
  
  The password for user {username} is approaching expiration in {password_expiration_days} days.

  
  
• In order to address this alarm, updating password for user account is required.
  
  Password of user account can be changed via different methods:
  
  
  1. Using NSX UI
     1. Login to NSX UI and navigate to tabs System > User Management
     2. Under User Management table select section Local Users
     3. From the list of local user accounts, click the menu icon (3 dots) for the respective user and choose Change Password.
  2. Using NSX CLI
     1. Login to NSX CLI using console or SSH into appliance via user credentials
     2. Execute following command into NSX CLI prompt
        
        set user <username> password
        
        
  3. Using API
     
     Invoke following API with valid request body, to reset the password of user account
     
     [PUT] /api/v1/node/users/<userid> where <userid> is the ID of the user.
     
     Refer NSX API guide for more information.

• Once password is updated for the user, alarm is resolved with following message:
  
  The password for the user {username} has been changed successfully or is no longer expired or the user is no longer active.

Maintenance window required for remediation? No

Additional Information

4.1 Admin Guide
4.2 Admin Guide