Changing root passwords on VMware Aria Automation, Orchestrator and Configuration using VMware Aria Suite Lifecycle.

Products

VMware Aria Suite

Issue/Introduction

This article provides the steps on VMware Aria Suite Lifecycle to update the root password on:

VMware Aria Automation (vRealize Automation)
VMware Aria Automation Orchestrator (vRealize Orchestrator).
VMware Aria Automation Configuration (Salt Stack Config)

It is part of a group of articles about managing passwords using VMware Aria Suite Lifecycle: Password management with Aria Suite Lifecycle (vRealize Suite Lifecycle Manager) Locker KB 92245.

Note: On VCF mode VMware Aria Suite Lifecycle, the passwords are managed by the SDDC manager rotation tool. Therefore:

It is suggested to follow the Rotate passwords – VMware Cloud Foundation Administration Guide. This document indicates what passwords are managed by SDDC manager.
If the passwords managed by the SDDC password rotation tool were updated outside of SDDC or this article was followed, it is needed to remediate them following Remediate Passwords – VMware Cloud Foundation Administration Guide.

In case of having problems with the Password Rotation tool or remediating passwords on SDDC Manager, please file a Service Request for the VCF team.

Changing password on VMware Aria Suite Lifecycle involves the Locker and Lifecycle Operations applications:

Locker: creates the password in the VMware Aria Suite Lifecycle database and confirms if the password is being used or not.
Lifecycle Operations: provides the day 2 action to Change the Password.
- Note: The screenshots of this article are from vRealize Suite Lifecycle Manager 8.10, therefore, the old branding will be present.

Environment

VMware vRealize Suite Lifecycle Manager 8.x

Resolution

Prerequisites:

Validate the current root password is available.
If the current password is not available is required to reset the root password following VMware docs and then remediate the password on VMware Aria Lifecycle following: Remediating passwords updated outside of VMware Aria Suite Lifecycle

Solution:

Navigate to Locker > Passwords fille out the form then click ADD.
Add the information of the new password.

The password will be added, however, won't be in use.

Navigate to Lifecycle Operations > Environments and click on VIEW DETAILS the Environment where the product is located.

Select the nodes tab, the node, and then click on CHANGE NODE PASSWORD.

Examples:

VMware Aria Automation cluster.

VMware Aria Automation Configuration.

VMware Aria Orchestrator (1 node).

Repeat step 5 for the other nodes or products.
The password will be added, however, won't be in use.

Navigate to Lifecycle Operations > Environments and click on VIEW DETAILS the Environment where the product is located.

Select the nodes tab, the node, and then click on CHANGE NODE PASSWORD.

Examples:

VMware Aria Automation cluster.

VMware Aria Automation Configuration.

VMware Aria Orchestrator (1 node).

Repeat step 5 for the other nodes or products.

Additional Information

Main article:

Password management with VMware Aria Suite Lifecycle (vRealize Suite Lifecycle Manager) Locker KB 322673.

Child articles:

Viewing passwords stored in VMware Aria Suite Lifecycle (vRealize Suite Lifecycle Manager) Locker KB 92247
Validating what passwords are being used per product in VMware Aria Suite Lifecycle (vRealize Suite Lifecycle Manager) KB 92250
Remediating passwords updated outside of VMware Aria Suite Lifecycle (vRealize Suite Lifecycle Manager) KB 92253
Resetting VMware Aria Suite Lifecycle root password KB 52431
Resetting admin@local password for VMware Aria Suite Lifecycle KB 52434

Changing password KBs:

Product

Password

KB

VMware Aria Automation (vRealize Automation)

VMware Aria Automation Config

(Salt Stack Config)

VMware Aria Automation Orchestrator

(vRealize Orchestrator)

root

KB 92254

VMware Aria Operations