How to reset the Admin@local password in SDDC Manager

Products

• VMware SDDC Manager / VCF Installer
• VMware Cloud Foundation

Issue/Introduction

The admin@local password is used to generate tokens on the SDDC Manager.

Environment

VMware Cloud Foundation 
VMware Cloud Foundation Installer

Resolution

Note: A snapshot of the SDDC Manager virtual machine must be taken before the changes are implemented.

1. SSH into the SDDC Manager virtual machine using the vcf user and then elevate to root by running su.
   
   
2. Create the local directory: mkdir -p /etc/security/local
   
   
3. Set the correct permissions on the local directory: chown root:vcf_services /etc/security/local && chmod 650 /etc/security/local
   
   
4. Create the .localuserpasswd file: echo -n "" > /etc/security/local/.localuserpasswd
   
   
5. Set the permissions on the .localuserpasswd file: chown root:vcf_services /etc/security/local/.localuserpasswd && chmod 660 /etc/security/local/.localuserpasswd
   
   
6. Set the new password for the admin@local account: echo -n 'TypePasswordHere' | openssl dgst -sha512 -binary | openssl enc -base64 | tr -d '\n' > /etc/security/local/.localuserpasswd

Additional Information

admin@local account is not stored in lookup_passwords.

The password can be changed from the developer center. 

Refer to the screenshot:

Password requirements:

• Length: 12-127 characters
• Allowed special characters: ! % @ $ ^ # ? *
• At least 1 lowercase letter, uppercase letter, number and special character should be present
• At least 2 alphabetic characters should be present
• A character cannot be repeated more than 3 times consecutively

Reference document: https://developer.broadcom.com/xapis/vmware-cloud-foundation-api/latest/users/#_usecase_updatelocaluserpassword