NSX UI Admin Password Reset Loop
Article ID: 412875
Updated On:
Products
Issue/Introduction
- After resetting the admin password, logging in with the new password prompts another reset.
- The system is caught in a password reset loop.
- NSX stopped working due to a password issue.
- Logging in to NSX as admin via the VM console shows the account is locked.
- Logging in to the NSX UI displays the below warning message, indicating that the admin password has expired and requesting that the password be reset:
"Your password has expired. Please create a new password." Environment
VMware NSX
Cause
Security policies within the NSX appliance trigger mandatory password rotations; failure to rotate or a mismatch in the credential store prevents the API and UI from authenticating the user.
Resolution
If you know the password for root but have forgotten the password for your local users, you can reset it using the following procedure:
1. Log in to the appliance as root.
2. To stop the server:
a. For NSX Edge, run the command /etc/init.d/nsx-edge-api-server stop.
b. Otherwise, run the command /etc/init.d/nsx-mp-api-server stop.3. (Optional) To reset the password for admin, run the command passwd admin.
4. (Optional) To reset the password for audit, run the command passwd audit.
5. (Optional) To reset a guest user password, run the command passwd guestusername.
6. Run the command touch /var/vmware/nsx/reset_cluster_credentials.
7. To restart the server:
a. For NSX Edge, run the command /etc/init.d/nsx-edge-api-server start.
b. Otherwise, run the command /etc/init.d/nsx-mp-api-server start.8. Wait for 5 Minutes for it to be sync on rest of the nodes in cluster.
9. Login to NSX GUI with the new password which you have set.
Additional Information
Document Reference for NSX 4.2.x Resetting the Passwords of an Appliance
If you have forgotten the root user's password, you can reset it using the following procedure: NSX-T Manager root password needs to be reset
Feedback
