NSX Installation failing with error: "A general system error occurred: Weak password: not enough different characters or classes. *** passwd: Authentication token manipulation error"

Products

• VMware NSX
• VMware vSphere ESXi

Issue/Introduction

• NSX Installation failing with the following error:
  
• ESX host advanced setting Security.PasswordQualityControl is configured with the following values: min=disabled,disabled,disabled,disabled,20

Environment

VMware NSX
VMware vSphere ESX

Cause

ESX host advanced setting Security.PasswordQualityControl defines the minimum requirements for password complexity and length. The values are ordered as follows:

• The first disabled: This means no minimum requirement for lowercase letters.   min=disabled,disabled,disabled,disabled,20

• The second disabled: This means no minimum requirement for uppercase letters. min=disabled,disabled,disabled,disabled,20

• The third disabled: This means no minimum requirement for numbers. min=disabled,disabled,disabled,disabled,20

• The fourth disabled: This means no minimum requirement for minimum password length. min=disabled,disabled,disabled,disabled,20

• The fifth 20: This is the minimum number of characters for special characters (e.g., punctuation, symbols). This suggests a minimum of 20 special characters in the password. min=disabled,disabled,disabled,disabled,20

The issue is caused because the fourth parameter is not configured to specify minimum required length of the password.

Resolution

This is a known issue impacting VMware NSX.

As a workaround change the fourth parameter Security.PasswordQualityControl in ESXi host advanced settings to the value that would match largest number in the other minimum password requirement values. For example if there is a minimum requirement of 20 special characters, then add 20 to the fourth value:

min=disabled,disabled,disabled,20,20

To find the Security.PasswordQualityControl setting:

• select ESXi host in the inventory
• go to Configure
• go to Advanced System Settings
• Edit and search for Security.PasswordQualityControl