Configure the Local User Password Expiration Policy for Private Cloud Automation for VMware Cloud Foundation

For local users of the VMware Aria Automation appliances, you configure the password expiration policy on a per-user basis.

Table 1. Default Password Expiration Policy for VMware Aria Automation
Local User	Setting	Default	Description
root	`maxdays`	`365`	Maximum number of days between password change
	`mindays`	`0`	Minimum number of days between password change
	`warndays`	`7`	Number of days of warning before a password expires

UI Procedure

Log in to the primary VMware Aria Automation node by using a Secure Shell (SSH) client at <aria_automation_primary_node_fqdn>:22 as root.
Change the value of the maximum number of days between password change by running the following command.
```
chage --maxdays <your_value> root
```
Change the value of the minimum number of days between password change by running the following command.
```
chage --mindays <your_value> root
```
Change the value of the number of days of warning before the password expires by running the following command.
```
chage --warndays <your_value> root
```
Verify the configuration of the desired values by running the following command.
```
chage --list root
```
Repeat the procedure for the remaining VMware Aria Automation appliances.

PowerShell Procedure

Start PowerShell.

Replace the values in the sample code and run the commands.

$sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io" 
$sddcManagerUser = "[email protected]" 
$sddcManagerPass = "VMw@re1!" 

$localUser = "root"

$maxDays = "90" 
$minDays = "0" 
$warnDays = "7"

To get the current configuration, run the command.

Request-AriaLocalUserPasswordExpiration -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -product vra

To configure the local user password expiration policy, run the command.

Update-AriaLocalUserPasswordExpiration -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -product vra -localuser $localUser -maxdays $maxDays -mindays $minDays -warndays $warnDays

Run the command in Step 3 to get the updated configuration.