How to Reset the Admin@local password in SDDC Manager

Products

• VMware SDDC Manager
• VMware Cloud Foundation

Issue/Introduction

The admin@local password is used to generate tokens on the SDDC Manager.

Environment

VMware Cloud Foundation
VMware Cloud Foundation Installer

Resolution

1. SSH into the SDDC Manager VM using the vcf user and then elevate to root with running su.
   
   
2. Create the local directory
   
   mkdir -p /etc/security/local

3. Set the correct permissions on the local directory
   
   chown root:vcf_services /etc/security/local && chmod 650 /etc/security/local
   
   
4. Create the .localuserpassword file
   
   echo -n "" > /etc/security/local/.localuserpasswd
   
   
5. Set the permissions on the .localuserpassword file. 
   
   chown root:vcf_services /etc/security/local/.localuserpasswd && chmod 660 /etc/security/local/.localuserpasswd
   
   
6. Set the new password for the admin@local account.

echo -n "TypePasswordHere" | openssl dgst -sha512 -binary | openssl enc -base64 | tr -d '\n' > /etc/security/local/.localuserpasswd

Additional Information

admin@local account is not stored in lookup_passwords.

We can change the password from the developer center. 

Please refer the screenshot.

Password requirements:

• Length: 12-127 characters
• Allowed special characters: ! % @ $ ^ # ? *
• At least 1 small letter, capital letter, number and special character should be present
• At least 2 alphabetic characters should be present
• A character cannot be repeated more than 3 times consecutively

Doc:
https://developer.broadcom.com/xapis/vmware-cloud-foundation-api/latest/users/#_usecase_updatelocaluserpassword