Configure the Local User Password Expiration Policy for Intelligent Operations Management for VMware Cloud Foundation

For local users of the VMware Aria Operations appliances and the VMware Cloud Proxy appliances, you configure the password expiration policy on a per-user basis.

Table 1. Default Password Expiration Policy for VMware Aria Operations
Local User	Setting	Default	Description
root	`maxdays`	`365`	Maximum number of days between password change
	`mindays`	`0`	Minimum number of days between password change
	`warndays`	`7`	Number of days of warning before a password expires

UI Procedure

Log in to the primary VMware Aria Operations node by using a Secure Shell (SSH) client at <aria_operations_primary_node_fqdn> as root.
Change the value of the maximum number of days between password change by running the following command.
```
chage --maxdays <your_value> root
```
Change the value of the minimum number of days between password change by running the following command.
```
chage --mindays <your_value> root
```
Change the value of the number of days of warning before the password expires by running the following command.
```
chage --warndays <your_value> root
```
Verify the configuration of the desired values by running the following command.
```
chage --list root
```
Repeat the procedure for the remaining VMware Aria Operations appliances and the VMware Cloud Proxy appliances.

PowerShell Procedure

Start PowerShell.

Replace the values in the sample code and run the commands.

$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io" 
$sddcManagerUser = "[email protected]" 
$sddcManagerPass = "VMw@re1!" 

$localUser = "root"

$maxDays = "90" 
$minDays = "0" 
$warnDays = "7"

To get the current configuration, run the command.

Request-AriaLocalUserPasswordExpiration -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -product vrops

To configure the local user password expiration policy, run the command.

Update-AriaLocalUserPasswordExpiration -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -product vrops -localuser $localUser -maxdays $maxDays -mindays $minDays -warndays $warnDays

Run the command in Step 3 to get the updated configuration.