vCenter and NSX Account Passwords Not Auto-Rotating Before Expiration Date in Aria Operations

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

vCenter and NSX Root Account passwords can be seen as "Disconnected" in VCF Operations. This is typically caused by expired passwords.

Environment

VMware VCF Operations 

Cause

VCF Operations does not automatically rotate the Root account passwords. This is a misconception sometimes seen due to VCF Operation's handling of internal service user accounts. 

Resolution

vCenter Server and NSX Root accounts can have their passwords manually reset from VCF Operations, but an automated or scheduled task cannot be created to do so. The password expiration policies can be set on each respective appliance locally: 

• vCenter Server: Change the Password and Password Expiration Settings of the Root User
• NSX Manager: NSX-T Manager and Edge Node Password Expiry set to 90 days