The Active Directory password expiration notification is separate from the vCenter Server SSO password expiration. The default password expiration notification for an Active Directory user is 30 days but the actual password expiration depends on your Active Directory system. The vSphere Client controls the expiration notification. You can change the default expiration notification to meet the security standards in your corporation.



  1. Log in to the vCenter Server shell as a user with administrator privileges.
    The default user with the super administrator role is root.
  2. Change directory to the location of the vSphere Client file.
    cd /etc/vmware/vsphere-ui
  3. Open the file with a text editor.
  4. Edit the following variable.
    sso.pending.password.expiration.notification.days = 30
  5. Restart the vSphere Client.
    service-control --stop vsphere-ui
    service-control --start vsphere-ui