Generate a Password Policy Configuration Drift Report with PowerShell for Identity and Access Management for VMware Cloud Foundation

With the VMware.CloudFoundation.PasswordManagement PowerShell module, you can generate a report with or without configuration drift to capture the existing password policy configuration for SDDC Manager, vCenter Single Sign-On, vCenter Server, ESXi, NSX Local Manager, and NSX Edge.

The configuration drift report compares your current password policy configuration values with the values from the JSON configuration file provided. Using this comparative report, you can define your password policy configuration according to the standards of your organization and quickly identifiy mismatches.

Procedure

1. Start PowerShell.

2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

   $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
   $sddcManagerUser = "[email protected]"
   $sddcManagerPass = "VMw@re1!"
   
   $sddcRootPass = "VMw@re1!"
   $reportPath = "F:\Reporting"
   $policyFile = "PasswordPolicyConfig.json"

3. Perform the configuration by running the command in the PowerShell console.

   Invoke-PasswordPolicyManager -sddcManagerFqdn $sddcManagerFqdn -sddcManagerUser $sddcManagerUser -sddcManagerPass $sddcManagerPass -sddcRootPass $sddcRootPass -reportPath $reportPath -allDomains -drift -policyFile $policyFile