VMware Cloud Foundation: How to Reset the vcf and root Passwords on SDDC Manager

VMware VCF:如何重置 SDDC Manager 的 vcf 和 root 账户的密码

Step 1: Sign in to the vCenter Server / VMware vSphere UI, locate the SDDC Manager virtual machine, then click Actions > Edit Settings

Step 2: Under VM Options > Boot Options, change Boot Delay from the default 0 to 10000 milliseconds, then click OK to save

Step 3: Click Actions > Power > Reset

Step 4: Open the console of the SDDC Manager virtual machine

Step 5: On the Photon OS screen, press “e” to enter GRUB

Step 6: Use the arrow keys to navigate to the line starting with linux, and append the following at the end of the line:

rw init=/bin/bash

Step 7: Press F10 to continue booting the SDDC Manager virtual machine

Step 8: Run the following commands to unlock the vcf and root accounts:

/usr/sbin/faillock --user root --reset
/usr/sbin/faillock --user vcf --reset

Step 9: Run the following commands to set temporary passwords for both vcf and root:

passwd vcf
passwd root

Step 10: Reboot SDDC by running:

reboot -f

Step 11: After a few minutes, connect to SDDC Manager via SSH using the vcf account and the temporary password. Then switch to root and enter the temporary root password:

su root

Step 12: Run the following command to clear the password history:

echo "" > /etc/security/opasswd

Now use the commands from Step 9 to set the accounts to a new password or your previous password.

Note: Be sure to remember the new passwords for both vcf and root

You can also use the following commands to extend the password expiration period:

vcf:  chage -M 999 vcf
root: chage -M 999 root

In day-to-day operations, losing the vcf or root password—or having the account locked—is one of the most common and disruptive issues in a VMware Cloud Foundation environment. Using the GRUB single-user recovery method described above, you can quickly unlock accounts, reset passwords, and restore SSH access to SDDC Manager within minutes. It’s a good practice to regularly review password policies, back up critical credentials, and familiarize yourself with Photon OS recovery procedures to avoid future lockouts. These steps will help keep your Cloud Foundation environment secure, stable, and fully manageable.

The above steps are based on the official VMware KB: 323984

https://knowledge.broadcom.com/external/article/323984/how-to-reset-sddc-manager-vcf-and-root-u.html

有VM问题需要协助?

免费试用VMware技术助理(已接Deepseek)!即时解答VM难题

→ 🤖VM技术助理

解析和诊断各类vCenter错误,ESXi日志,虚拟机vmware.log

→ 📕VMware日志分析器

图书推介 - 京东自营

24小时热门

还有更多VMware问题?

免费试下我们的VMware技术助理(已接Deepseek)!即时解答VM难题 → 🤖VM技术助理

试试 📕VMware日志分析器 免费诊断各类vCenter错误,ESXi日志,虚拟机vmware.log等等

########

扫码加入VM资源共享交流微信群(请备注加群

需要协助?或者只是想技术交流一下,直接联系我们!

推荐更多

VMware vSphere:如何查询ESXi支持的网卡型号?
how-to

How to Check Which Network Adapters Are Supported by VMware ESXi

Not sure whether your network card is supported by ESXi? This step-by-step guide shows how to check the official compatibility list, filter NIC models, and confirm required drivers and firmware so you can avoid installation issues and keep your virtualization environment stable.

Dell R760安装ESXi 8.0出现TPM告警的原因与解决思路
how-to

TPM Alert After Installing ESXi 8.0 on Dell Technologies PowerEdge R760

After deploying ESXi 8.0 on a Dell R760, you may see a TPM 2.0 connection warning even though the hardware is healthy. This guide explains the real cause — an unsupported SHA1 hashing algorithm — and walks through checking logs, updating TPM to SHA256, and clearing the alert safely in Maintenance Mode.

VMware vSphere等产品非永久许可过期和试用期到期会出现什么问题?
what-is

What happens when non-perpetual VMware vSphere licenses expire or trial periods end?

When a VMware vSphere product like ESXi, vCenter Server, or vSAN uses a non-perpetual license, serious functional limitations can occur once the 60-day trial or subscription expires. From host disconnections to being unable to power on VMs or add storage, the impact can be critical. This article explains what to expect and how to prepare before your VMware license expires.

//omg10.com/4/9119499