How to change vCenter root password settings

Products

• VMware vCenter Server

Issue/Introduction

vCenter root password by default is configured to expires every 90 days. There is no notification that get sent out to notify of the vCenter root password is expiring or expired until the root account is used to logged into the vCenter Applicance.

Environment

vCenter 7.x

vCenter 8.x

Cause

vCenter root "Password expiration settings" is configured for "no" when looking at the "Administration setting" when logged into the vCenter FQDN:5480

Resolution

Log into the vCenter VAMI: https://<vCenterFQDN>:5480

And then select administration.

1. Enable Password Expiration Settings
2. Change Password Expires to "Yes"
3. Provide "Password validity (days)
4. Provide Email address that will be sent the "password" expiring warning notification

By default the warning email is sent out 7 days before the password is set to expire. To change the setting to the desired days will require the following actions:

1. SSH into vCenter and log in as root
2. Type in the command: chage -l root
   • This will display the password expiration setting for root account
   • Make note of "Number of days of warning before password expires"
3. Run the following command to change the "Number of days": chage -W root <number of days here>
4. Then run the command "chage -l root" to verify the changes took affect

 

 

Additional Information

Change or Reset the root account password in vCenter Appliance

Reset vCenter Server Appliance root password without reboot (6.7u1 / 7.x / 8.x).

Change the Password and Password Expiration Settings of the Root User