Local user password complexity and length requirements in VMware Cloud Director

Products

• VMware Cloud Director
• VMware Telco Cloud Platform

Issue/Introduction

• Administrators want to enforce password complexity (special characters, uppercase, etc.) for local users
• Attempts to modify the minimum password length requirement for local accounts

Environment

VCD: 9.x, 10.x

TCP: 3.x, 4.x, 5.x

Cause

VMware Cloud Director enforces a hard-coded, non-configurable minimum length of six characters for local users. Native complexity rules (regex-based) are not supported for local authentication.

Resolution

1. Navigate to the Administration tab in the VMware Cloud Director tenant or system portal.
2. Configure an External Identity Provider (LDAP, SAML, or OIDC).
3. Enforce password complexity, history, and rotation policies within the external directory.
4. Import users/groups from the external IdP

Additional Information

VMware Cloud Director Security Guide