Reset ESXi root password with AD domain account

Products

• VMware vSphere ESXi

Issue/Introduction

• ESXi root password is forgotten.
• ESXi has joined Active Directory domain.
• ESXi is managed by vCenter Server but failed to reset root password with Host Profile.

Environment

VMware vSphere ESXi 7.0
VMware vSphere ESXi 8.0

Resolution

Note:

• The primary solution to reset root password of ESXi host is Reset ESXi Root Password with Host Profile
• This method requires to access AD domain controller.

Follow the steps:

1. Add an AD domain account in domain controller
   1. Click Action > New > User, enter username (etc. esxi) and click Next.
   2. Enter the Password. Tick the Password never expires checkbox.
   3. Click Next and Finish
2. Create ESX Admins group on the AD domain controller. The group name must be exactly the same.
   1. Click Action > New > Group.
   2. Enter ESX Admins as the group name
   3. Click OK
3. Add the new User into ESX Admins group.
   1. Right Click the ESX Admins group and click Properties.
   2. Go to Members and click Add.
   3. Enter the new user name (esxi in this example) and click Check Names.
   4. If the name is correct, click OK to finish.
4. Login ESXi host web client with the new AD domain user
5. Go to Manage > Security & Users > Users
6. Select root and click the Edit button.
7. Set the new password for root account.

Additional Information

Configuring the ESXi host with Active Directory authentication