SDDC Password Remediation Fails for NSX Manager

Products

• VMware SDDC Manager

Issue/Introduction

• Manual Reset of NSX Credentials does not allow Password Remediation
  • NSX credentials are not being synchronized between NSX Managers after manual password reset.
  • Resetting the Passwords of an Appliance
  • Credential operations fail on NSX-T Components in SDDC Manager
    
    
• operationsmanager.log errors for an account locked by an IP that corresponds with the SDDC manager.
  
  
• NSX Manager #/usr/sbin/faillock --user admin" does not show any locks.
  
  
• SDDC Manager has multiple failed workflows for "NSX Version Sync" with pending subtask for "Release Lock"
  

 

Environment

SDDC 5.2.1

Cause

Multiple failed workflows for "NSX Version Sync" with pending subtask for "Release Lock" are preventing Password Remediation.

Resolution

• On a SDDC manager terminal session, run the following command for all the failed tasks: 
  
  # curl -s -X DELETE http://localhost/tasks/registrations/<taskid>
  
  
• Manually reset the password
  
  
• Retry Password remediation

Additional Information

When an error occurs, for example after a password expires, you must manually reset the password in the component product. After you reset the password in a component, you must remediate the password in SDDC Manager to update the password in the SDDC Manager database and the dependent VMware Cloud Foundation workflows.