SDDC Manager password rotation failure for NSX Manager Service Account via SDDC Manager due to account lockout.

Products

• VMware NSX

Issue/Introduction

Password update or remediation fails for the NSX Manager Service Account when initiated via SDDC Manager due to the account being locked in NSX Manager. 

Symptoms: 

"License check: Failed to fetch assigned licenses."  in VCF Operations UI

Error in the NSX audit.log and reverse-proxy.log showing password lockout: 

nsx-audit.log:102:<182>1 2026-09-03T03:46:58.639Z <SDDC Manager IP>  NSX 1667171 SYSTEM [nsx@4413 audit="true" comp="nsx-manager" level="INFO" subcomp="http"] UserName="<svc name>@10.###.###.2", ModuleName="ACCESS_CONTROL", Operation="LOGIN", Operation status="failure"

reverse-proxy.log [nsx@4413 comp="nsx-manager" errorCode="MP403" level="ERROR" subcomp="http"] The credentials were incorrect or the account specified has been locked.

 

Environment

VCF 9.x

VMware NSX 9.x 

Cause

 

Password updates or remediations for the NSX Manager Service Account via SDDC Manager can fail when stale cached credentials from active background services, polling jobs, or API integrations trigger repeated login failures. These continuous authentication retries cause NSX Manager to exceed its failed attempt threshold and temporarily lock out the account, which subsequently blocks SDDC Manager from completing credential synchronization. 

 

Resolution

See KB 316043 for resolution steps