Administrators are unable to clone a Virtual Machine (VM) from a template. The clone operation fails consistently, even when attempting to deploy to different clusters.
Reviewing the /var/log/vmware/vpxd/vpxd.log on the vCenter Server reveals the following errors indicating a password expiration fault during the clone operation:
YYYY-MM-DDTHH:MM:SS172+05:30 error vpxd[1624754] [Originator@6876 sub=VmProv opID=xxxxxxx-auto-1qxro-h5:70447842-64-01] Local-VC Datastore Full Clone failed at vpx.vmprov.CopyVmFiles for poweredOff VM '<VM_template>' (vm-50111, ds:///vmfs/volumes/DS/vm-template-folder/vm-template.vmtx) to new name <_HOSTNAMES> on <HOSTNAME> (<IPS>) in pool resgroup-52355 with ds ds:///vmfs/volumes/DS/ to <HOSTNAMES> (<IPS>) in pool resgroup-52355 with ds ds:///vmfs/volumes/DS/ with fault vim.fault.PasswordExpired:
YYYY-MM-DDTHH:MM:SS250+05:30 error vpxd[1624754] [Originator@6876 sub=Default opID=xxxxxx-auto-1qxro-h5:70447842-64-01] [VpxLRO] -- ERROR lro-92973989 -- xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxx(xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx) -- vm-ID-- vim.VirtualMachine.clone: :vim.fault.PasswordExpired
--> Result:
--> (vim.fault.PasswordExpired) {
--> faultCause = (vmodl.MethodFault) null,
--> faultMessage = <unset>
--> msg = "Received SOAP response fault from [<<io_obj p:0x00007fb5fc5f57f8, h:144, <UNIX ''>, <UNIX '/var/run/envoy-hgw/hgw-pipe'>>, /hgw/<HOSTNAMES>/sdk>]: login
--> Cannot complete login due to expired password."
--> }
VMware vCenter Server 8.x
VMware vSphere ESXi 8.x
The ESXi host vpxuser password is not in sync with the vCenter Server and has expired. If the vpxuser password expires, vCenter is restricted from authenticating to the host to perform provisioning tasks, causing operations like VM cloning to fail with vim.fault.PasswordExpired
To resolve the issue, force the vCenter Server to renegotiate and synchronize the host connection, which will reset the vpxuser password:
Log in to the vSphere Client.
Right-click on the affected ESXi host in the Inventory.
Click Disconnect.
Wait in the Recent Tasks pane until the disconnect task status changes to complete.
Right-click on the disconnected ESXi host from the Inventory again.
Under the Connection option, choose Connect.
A prompt will appear. Provide the root username and password of the ESXi host and proceed to finish the connection wizard.