Health Check operations in SDDC Manager fails at Password-check Perform Password expiry status checks on SDDC components

Products

• VMware vCenter Server

Issue/Introduction

Health Check operations in SDDC Manager fails at the sub-task:

• Password-check: Perform Password expiry status checks on SDDC components.
  
  

  

Environment

VMware Cloud Foundation 5.x

Cause

Expired password of SDDC Manager components (NSX-T, vCenter, ESXi, Aria)

Resolution

1. SSH into the SDDC Manager with the vcf account and then elevate to root using su
2. Run the sos password health command on the SDDC
   
   /opt/vmware/sddc-support/sos --password-health
   

   Sample output

   01 | Workspace ONE Access : wsa.example.com | sshuser | Mar 19, 2024 | May 18, 2024 | -110 days | RED

3. Resolve the password issue for the component with the state showing as "RED"
   
   
4. For VIDM sshuser expired password 
   
   • Login to vIDM using root user
   • To change the sshuser password - passwd sshuser
   • Enter new password and Retype the password.
   • Password changed successfully.
   • Validate the healthcheck is showing in Green

Note: for VMware ARIA components, ensure to run a successful inventory sync from vRSLCM - Refer Inventory synchronization in vRealize Suite Lifecycle Manager

Additional Information

See also:

• SDDC: How to reset SDDC Manager vcf and root user accounts
• ARIA: Changing passwords on Workspace One Access (vIDM) using VMware Aria Suite Lifecycle
• NSX: Credential operations fail on NSX Components in SDDC Manager
• vCenter: Resetting root password in vCenter Server Appliance 7.x / 8.x or Reset the root password in vCenter Server Appliance without reboot / 6.7u1 / 7.x / 8.x