Host Upgrade Fails with PASSWORD_VALIDATION_EXECUTION_FAILED Error - VCF Operations.

Products

• VCF Operations
• VMware vSphere ESXi

Issue/Introduction

• Upgrading host fails with error: 
  

  Error Code: PASSWORD_VALIDATION_EXECUTION_FAILED

  Error Description: Password validation execution is failed.

  Impact: Password validation execution for the password is failed. In case there is a credential which is not valid, upgrade will fail.

  Remediation: Password validation execution has failed. Please verify the lcm logs for specific credential and reason for execution failure.

• LCM logs:
  ESXI","credentialType":"","username":"svc-vcf-#######","passwordDetails":{"validityStatus":"INVALID","expiryDataRetrievalStatus":"UNKNOWN"},

Environment

VCF: 9.1

Cause

Password expiration is set to 99999 - no expiration, vCenter is unable to validate. Setting the Password expiration to 9999 sets expiration. 

SDDC known password does not match the current password

Resolution

Via the vSphere Client or ESXi Host Client:

1. Select your ESXi host.

2. Navigate to Configure (or Manage in older versions) > System > Advanced System Settings.

3. Use the filter/search box to search for Security.PasswordMaxDays.

4. Edit the value to set the maximum number of days a password is 9999 (the default is usually 99999 days, which effectively means it never expires).

Additional Information

Other related password settings you will find in this same location include:

• Security.PasswordHistory: Number of previous passwords to remember (prevents reuse).

• Security.PasswordQualityControl: Enforces password complexity rules and length.

• Security.AccountLockFailures: Number of failed login attempts before an account is locked out.

• Security.AccountUnlockTime: Number of seconds an account remains locked out.