Managing Password Expiration for VCF Components and Cloud Proxies

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

This article provides procedures for extending the password expiration policy for VCF components, such as Cloud Proxies, without modifying the actual password.

It explains the command-line usage and how VCF Operations updates this information.

Environment

VMware Cloud Foundation (VCF) 9.1

VCF Cloud Proxy 9.1

 

Resolution

Password expiration policies for root or service accounts (e.g., backup user) are enforced by the underlying OS, requiring administrative updates to extend the validity period when standard rotation policies are not sufficient.

Additional Information

1. Log in to the VCF component (e.g., Cloud Proxy) via SSH using administrative credentials.
2. Use the chage command to set the maximum number of days before the password expires. For a two-year extension, execute the following command:
   chage -M 1460 <username>
3. Verify the change by running:
   chage -l <username>
4. Allow time for VCF Operations to trigger a synchronization task. The updated expiration date will automatically reflect in the management interface once the sync completes.