This KB covers the process for getting the vmware-system-user passwords for VCF Automation or VCF Identity Broker from the VCF Operations Fleet Management
The Fleet Management > Passwords UI in VCF Operations does not allow for viewing password values.
Log in to VCF Operations UI and navigate to Fleet Management > Lifecycle > VCF Management > Components
Click automation or identity broker
Locate the desired node and click the Open button ( >> icon) to view node details
Copy the password alias name listed next to Other > VMware System User Password
Log in to the fleet manager appliance as root via SSH
Assign the password alias copied in Step 4 to a variable
pwAlias='<vmware-system-user pw alias>'
Note: Replace <vmware-system-user pw alias> with the password alias copied in step 4
Assign the Fleet Manager root password to a variable
rootPW=$(systemd-ask-password "Enter Fleet Manager root user password: ")
Assign the Fleet Manager admin@local password to a variable
adminPW=$(systemd-ask-password "Enter Fleet Manager admin@local user password: ")
Retrieve the vmid for the password alias via API
vmid=$(curl -sSk -u "admin@local:$adminPW" "https://localhost/lcm/locker/api/v2/passwords?aliasQuery=$pwAlias" | grep -Po '(?<=vmid\":\")[^\"]+')
Retrieve the password value for the password alias via API
pwValue=$(curl -sSk -u "admin@local:$adminPW" -H "Content-Type: application/json" "https://localhost/lcm/locker/api/v2/passwords/$vmid/decrypted" -d '{"rootPassword":"'$rootPW'"}' | grep -Po '(?<=password\":\")[^\"]+'); echo ${pwValue:?}
Unset variables
unset pwAlias adminPW rootPW pwValue vmid