NSX upgrade pre-check task in VCF 9.x fails with error "An active NSX alarm has been detected that may affect the upgrade"

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• NSX upgrade pre-check task fails with the following error in VCF Operations 9.x:
  

  An active NSX alarm has been detected that may affect the upgrade. Feature: Password Management, Event Type: Password Expired, State: OPEN, Node: ########-####-####-####-########. Kindly execute the recommended action for the alarm and confirm that it is no longer active.

   

• In the NSX Manager GUI, under System -> User Management -> Local Users, there are users with password expired with the following alarm triggered:
  

  The password for user <username> must be changed now to access the system. For example on Manager nodes, to apply a new password to a user, invoke the following NSX API with a valid password in the request body: PUT /api/v1/node/users/<userid> where <userid> is the ID of the user. For Edge nodes, invoke the following NSX API with a valid password in the request body: PUT /api/v1/transport-nodes/<edge-node-id>/node/users/<userid>.

Environment

VMware Cloud Foundation 9.x

VMware NSX-T

Cause

NSX local user password is expired causing an active NSX system alarm, which acts as a blocker for the NSX upgrade process.

Resolution

Reset the password for the user in the error message by following any one of the methods below:

Method 1: Using NSX UI:

1. Log in to the GUI using the expired credentials.
2. Reset the password when prompted.

Method 2: Using NSX CLI:

1. SSH into the NSX Manager as the user with expired password.
2. Reset the password when prompted.

Method 3: Using NSX API:

1. Use API: [PUT] /api/v1/node/users/<userid> where <userid> is the ID of the user. Refer: NSX-T Data Center REST API

Additional Information

VMware NSX Alarm: Root, Admin, or Audit Password Expired

Password expired alarm NSX

NSX-T Data Center REST API