The Active Directory password expiration notification is separate from the vCenter Server SSO password expiration. The default password expiration notification for an Active Directory user is 30 days but the actual password expiration depends on your Active Directory system. The vSphere Client and the vSphere Web Client control the expiration notification. You can change the default expiration notification to meet the security standards in your corporation.

Procedure

  1. Log in to the vCenter Server system as a user with Administrator privileges.
    The default user with super administrator role is root.
  2. Change directory to the location of the webclient.properties file.
    OS Command
    Linux
    • vSphere Client: 
      cd /etc/vmware/vsphere-ui
    • vSphere Web Client: 
      cd /etc/vmware/vsphere-client
    Windows
    • vSphere Client: 
       cd %ALLUSERSPROFILE%\VMware\vCenterServer\cfg\vsphere-ui
    • vSphere Web Client: 
      cd %ALLUSERSPROFILE%\VMware\vCenterServer\cfg\vsphere-client
  3. Open the webclient.properties file with a text editor.
  4. Edit the following variable. 
    sso.pending.password.expiration.notification.days = 30
  5. Restart the client.
    OS Command
    Linux
    • vSphere Client: 
      service-control --stop vsphere-ui
service-control --start vsphere-ui
    • vSphere Web Client: 
      service-control --stop vsphere-client
service-control --start vsphere-client
    Windows
    • vSphere Client: 
      cd "C:\Program Files\VMware\vCenter Server\bin\"
service-control --stop vsphere-ui
service-control --start vsphere-ui
    • vSphere Web Client: 
      cd "C:\Program Files\VMware\vCenter Server\bin\"
service-control --stop vspherewebclientsvc
service-control --start vspherewebclientsvc