OPERATIONAL DEFECT DATABASE
...
...
The root account password of VMware vCenter Server Appliance failsThe root account of the vCenter Server Appliance 6.5 and above is locked or account is expiredThe root account password has been lost or forgotten Note: The above symptoms can also occur on an external Platform Services Controller (PSC) running on vSphere 6.5 and 6.7.
This article provides steps to reset a lost, forgotten, or expired root password for a vCenter Server Appliance (or external PSC) 6.5 and later. Important: This article is explicitly for the vCenter Server Appliance (and external PSC 6.5 and 6.7) 6.5 and later.For previous versions, see: Resetting root account password of vCenter Server Appliance 6.0
For passwords that have expired, the default vCenter Server Appliance password expires after 90 days. For more information, see Change the Password and Password Expiration Settings of the Root User
Process to Reset the Root Password in VCSA: Note: 6.7U1 and later has a simpler method to reset the password, see How to reset the lost or forgotten root password in vCenter Server Appliance 6.7 U1 and later To reset the root password for the vCenter Server Appliance: Take a snapshot or backup of the vCenter Server Appliance before proceeding. Caution: Do not skip this step Note: If the vCenter Appliance is on the same ESXi hosts it manages. Connect directly to the ESXi host that it is located on to perform these steps. Reboot the vCenter Server Appliance.After the VCSA Photon OS starts, press the e key to enter the GNU GRUB Edit Menu.Locate the line that begins with the word Linux.Append these entries to the end of the line: rw init=/bin/bash The line should look like the following screenshot: Press F10 to continue booting.Run the command mount -o remount,rw / Unlock the 'root' account using below command if it is already locked due to multiple logins with incorrect password pam_tally2 --user=root --resetFor 8.0 U2 onwards:/usr/sbin/faillock --user root --resetNote: pam_tally2 is deprecated in Photon 4, use faillock instead. In the Command prompt, enter the command passwd and provide a new root password (twice for confirmation): passwd Unmount the filesystem by running this command (yes, the unmount command is umount - it's not a spelling error): umount / Reboot the vCenter Server Appliance by running this command: reboot -f Confirm that you can access the vCenter Server Appliance using the new root password.Remove the snapshot taken in Step 1 if applicable.You could set the Root password to never expire in order to prevent this issue by running command: # chage -I -1 -m 0 -M 99999 -E -1 root or at the VAMI ( https://<vcenter_fqdn>:5480) Note: If you continue to have issues, see Unable to log in to the vCenter Server Appliance shell using root account even after password reset
For 7.0U1 and 6.7U3j there are a few changes: The Root user will be prompted for resetting the password when they try to SSH to the machine if expired or expiring.You can also login to VAMI using the SSO administrator and reset the root password from there.Email notification is sent earlier to prevent from having the Root password expired.An alarm will be triggered in vsphere-ui to notify the user about the password expiry. Changes in 8.0 U2 and above versions:You will get below error while executing pam_tally2 in 8.0 U2 or above versions, as this utility was deprecated in Photon 4 and 8.0 U2 is using Photon 4 version. The alternate utility on Photon 4 is "/usr/sbin/faillock" to unlock the accounts."-bash: pam_tally2: command not found"For more information, see: VMware Skyline Health Diagnostics for vSphere - FAQResolution: appliance (os) root password is expired or is going to expire soonUnable to log in to the vCenter Server Appliance shell using root account even after password reset"Appliance (OS) root password is expired or is going to expire soon" attempting to upgrade vCenter Server ApplianceChange the Password and Password Expiration Settings of the Root User For translated versions of this article, see: 失くしてしまったか忘れてしまった root パスワードを vCenter Server Appliance 6.5 でリセットする方法如何在 vCenter Server Appliance 6.5 中重置丢失或忘记的 root 密码
Click on a version to see all relevant bugs
VMware Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
