If you are locked out of the Carbon Black Cloud Workload Appliance that has admin privileges, you can reset the password.

Procedure

  1. Log in to the vCenter Server at https://<vCenter IP/Domain address> using admin credentials.
  2. Under Hosts & Clusters, select the Carbon Black Cloud Workload Appliance.
  3. In vCenter Server, click the Summary tab and click Launch Web Console.
  4. In the Web Console window, use the root credential to log in.
  5. Verify if the admin account is locked using the pam_tally2 -u admin command.
  6. If the admin account is locked, issue the following command to unlock it: 
    pam_tally2 -r -u admin
  7. To change the admin user password:
    1. SSH to the Carbon Black Cloud Workload Appliance using admin credentials.
      For example, SSH admin@<Appliance_IP_Address>.
    2. Issue the passwd admin command.
    3. Enter the current password and then enter the new password.
      Note: Do not use the last five passwords. The password must have at least eight characters. Enter a password that meets basic complexity: at least one number, one lower case letter, one upper case letter, and one special character.
    4. Re-enter the admin password.
      The Carbon Black Cloud Workload Appliance admin user password is changed.
  8. The appliance password automatically expires after 90 days. To reset the expired password:
    1. SSH to the Carbon Black Cloud Workload Appliance using admin credentials.
    2. Enter an admin password.
      Note: Do not use the last five passwords. The password must have at least eight characters. Enter a password that meets basic complexity: at least one number, one lower case letter, one upper case letter, and one special character.
    3. Re-enter the admin password.
    4. SSH to the Carbon Black Cloud Workload Appliance to verify that the password change is successful.
    5. Log in to the Carbon Black Cloud Workload Appliance using the admin user name and the updated password.
  9. To reset the root password.
    Note: For security reasons, SSH access for the root user is disabled on the Carbon Black Cloud Workload Appliance by default.
    1. SSH to the Carbon Black Cloud Workload Appliance using the admin credentials.
    2. Reset the password using the following commands:
      sudo su
      passwd root
    3. Enter the current password and then the new password.