Managing VM root User Passwords

The password for the root operating system user on all Data Management for VMware Tanzu VMs (Provider VMs, Agent VMs, and Database VMs) expires after three months. You are required to update the root password for all VMs running in your Data Management for VMware Tanzu installation before expiry.

Data Management for VMware Tanzu does not support changing a VM root password from the console; you must change each password using the Data Management for VMware Tanzu API.

Prerequisites

You must be able to identify the IP address of the Provider VM(the IP address you use to access the Data Management for VMware Tanzu console).

Also ensure that the password that you set meets the password policy rules of Data Management for VMware Tanzu. The password must contain:

Minimum 8, maximum 20 characters,
At least one uppercase letter, one lowercase letter,
At least one number, and
At least one special character (?!@#$%^&*).

Changing the root User Password on the Provider VM

To change the root password of a Provider VM:

Identify the Provider VM node for which you want to change the password. You can obtain the identifier by invoking the /appliance/provider-ha-nodes endpoint of the Data Management for VMware Tanzu API, locating the node in the output, and extracting the id:
```
GET https://<provider-ip-address>/appliance/provider-ha-nodes
```
Sample response excerpt:
```
...
  {
    "id": "e6e517e5-fca0-4778-96bd-52cb374fb87d",
    "state": "ACTIVE_MODE",
    "role": "STANDALONE",
     ...
  }
...
```

Invoke the /appliance/provider/<provider-id>/password endpoint, providing the new password:

PUT https://<provider-ip-address>/appliance/provider/<provider-id>/password

Request parameters:

{
  "newPassword": "string"
}

Changing the root User Password on an Agent VM

To change the root password of an Agent VM:

Identify the Agent VM for which you want to change the password. You can obtain the identifier by invoking the /provider/environments endpoint of the Data Management for VMware Tanzu API, locating the environment associated with the Agent VM in the output, and extracting the id.
```
GET https://<provider-ip-address>/provider/environments
```

Invoke the /provider/environments/<environment-id>/password endpoint, providing the new password:

PUT https://<provider-ip-address>/provider/environments/<environment-id>/password

Request parameters:

{
  "newPassword": "string"
}

Changing the root User Password on a Database VM

To change the root password of a Database VM:

Identify the Database VM for which you want to change the password. You can obtain the identifier by invoking the /provider/databases endpoint of the Data Management for VMware Tanzu API, locating the database in the output, and extracting the id.
```
GET https://<provider-ip-address>/provider/databases
```
Sample response excerpt:
```
...
  {
    "id": "b97b4b71-bb32-4fd7-a34f-1e9b13a231f5",
    "instanceName": "lisa-mysq1-inst-1",
    ...
    "dbType": "MYSQL",
    "role": "STAND_ALONE",
    "version": "8.0.26",
    ...
  }
...
```
Invoke the /provider/databases/<db-id>/update-password endpoint, providing the new password:
```
PUT https://<provider-ip-address>/provider/databases/<db-id>/update-password
```
Request parameters:
```
{
  "dbPassword": "string"
}
```