VCF Automation password update fails via Fleet Manager with error LCMVCFA00014

Products

• VCF Automation
• VCF Operations

Issue/Introduction

In a successfully deployed VMware Cloud Foundation (VCF) environment, updating the password for the VCF Automation component via the Fleet Manager password policy fails.

 

When creating a password policy with a minimum length less than 15 characters (e.g., 8 characters) and assigning it to VCF Automation, the compliance check incorrectly reports a "Compliant" status without issues.

 

Additionally, the Password Requirements in the Update Password UI also incorrectly display the minimum length as 8 characters. 

 

The task fails with the following error code and exception:

Error Code: LCMVCFA00014

ExceptionMessage: Error occurred while updating VCFA admin account password

[
  {
    "messageId": "LCMVCFA00014",
    "message": "LCMVCFA00014",
    "eventId": "<UUID>",
    "retry": true,
    "exceptionMessage": "Error occurred while updating VCFA admin account password",
    "exceptionStackTrace": "java.lang.RuntimeException: Error occurred while updating VCFA admin account password
                              at com.vmware.vrealize.lcm.vcfa.driver.rest.util.VcfaEndpointRestUtil.updateAdminPwdById(VcfaEndpointRestUtil.java:214)
                              at com.vmware.vrealize.lcm.vcfa.plugin.tasks.VcfaUpdateAdminPwdTask.execute(VcfaUpdateAdminPwdTask.java:71)
                              at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:62)
                              at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
                              at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
                              at java.base/java.lang.Thread.run(Unknown Source)

The VCF Operations Fleet Management Appliance journal logs show entries similar to the following:

YYYY-mm-ddTHH:MM:SS.xxxZ INFO vrlcm[1239] [pool-3-thread-46] [c.v.v.l.v.d.r.u.VcfaEndpointRestUtil]  -- Response of update admin pwd :: {
  "statusCode" : 400,
  "responseMessage" : "{\"minorErrorCode\":\"BAD_REQUEST\",\"message\":\"Bad request: Password <REDACTED_SECRET> be between 15 and 128 characters long and contain 1 of each of the following: lowercase letter, uppercase letter, digit, special character

Environment

VMware Cloud Foundation 9.1
VCF Automation 9.x

Cause

The configured password policy for the VCF Automation component does not meet the strict minimum length and complexity requirements enforced by the application.

Resolution

Regardless of the Password Policy compliance check returning a "Compliant" status, the VCF Automation password must be updated to meet the minimum length requirement of 15 characters.

1. Navigate to VCF Operations -> Manage -> Fleet Management -> Passwords.

2. Click Update Password.

3. In the New password field, enter a password that is exactly between 15 and 128 characters in length.

4. Verify the new password contains at least 1 lowercase letter, 1 uppercase letter, 1 digit, and 1 special character.

5. Execute the password update task.