To configure automatic password rotation, you perform the procedure in the SDDC Manager UI .

If you change the vCenter Server password length using the vSphere Client or the ESXi password length using the VMware Host Client, rotating the password for those components by using SDDC Manager generates a password that complies with the password length that you specified.

Automatic password rotation is currently not supported for ESXi.

SDDC Manager has default password policy settings for automatic password rotation.

Table 1. Default Password Settings for Automatic Password Rotation by SDDC Manager

Setting

Value

Minimum length

20 characters

Minimum uppercase characters

1

Minimum numeric characters

1

Minimum special characters

1

Maximum consecutive identical characters

2

Procedure

  1. In a Web browser, log in to the SDDC Manager using the SDDC Manager UI.

    Setting

    Value

    URL

    https://sddc_manager-fqdn/ui​​​

    User name​

    [email protected]​
  2. VMW-SDDC-1609 Schedule automatic password rotation for vCenter Server, Platform Services Controller (PSC), NSX-T Data Center, and, backup.
    1. In the left pane, navigate to Administaration > Security > Password management.
    2. Select a filter on the top right (such as vCenter).
    3. Select the username(s), click Schedule rotation, and select a rotation schedule.