SDDC Manager Password Remediation fails due to 127-character UI limit

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

When attempting to rotate or remediate passwords in the SDDC Manager Password Management dashboard, the operation fails with the following validation error in the UI:

"Password must not contain more than 127 characters."

Environment

VMware Cloud Foundation (VCF) 9.1

Cause

There is a known issue where SDDC Manager may automatically generate a service account password that is 128 characters in length. However, the SDDC Manager Graphical User Interface (GUI) enforces a hard validation limit of 127 characters.

Because the GUI character limit, users are unable to "Update" or "Remediate" 128 character passwords.

Resolution

To bypass the GUI limitation and successfully remediate the password, you must perform the update using the VCF Public API via the SDDC Manager Developer Center.

1. Identify Resource IDs:

   • Navigate to Developer Center > API Explorer.
   • Use the GET /v1/credentials or GET /v1/nsxt-managers calls to find the resourceId and username for the affected component.

2. Execute API Patch:

   • Locate the Internal APIs or Password Management section in the API Explorer.
   • Use the PATCH /v1/credentials endpoint.
   • Enter the following JSON payload, ensuring you replace the password, username, resourceId, and resourceName with your environment's specific values.

Example Payload for API Remediation:

json

 

{
    "elements": [ {
        "credentials": [ {
            "accountType": "SERVICE",
            "credentialType": "API",
            "password": "<INSERT_128_CHARACTER_PASSWORD_HERE>",
            "username": "svc-sddc-mgr-nsx-xxxx"
        } ],
        "resourceId": "<YOUR-RESOURCE-UUID>",
        "resourceName": "<NSX_MANAGER_FQDN>",
        "resourceType": "NSXT_MANAGER"
    } ],
    "operationType": "REMEDIATE"
}

3. Verify Status:
   • After the API returns a 202 Accepted status, monitor the task in the SDDC Manager Task bar.
   • Once complete, verify the account status shows Connected (Green) in the Password Management dashboard.

Additional Information

NSX service account is disconnected in SDDC manager Password Management