How to Fix: vCenter Root User Password Expired

Has Your vCenter Root User Password Expired? Here’s How to Fix It

Has your vCenter root user password expired? Don’t worry—this is a common issue, and it’s easy to fix. VMware enforces password expiration policies as a security measure, but being locked out unexpectedly can be frustrating. Fortunately, regaining access is straightforward. This guide will walk you through the step-by-step process to reset the expired root password and get back into your vCenter Server without hassle.

Why Does the vCenter Root Password Expire?

VMware vCenter Server follows standard security practices, including enforced password expiration for the root user. This is intended to improve security by ensuring passwords are changed periodically.

However, if you’re caught off guard, it can temporarily lock you out. Let’s walk through the recovery process.

How to Reset an Expired Root Password in vCenter

Step 1: Access the VAMI (vCenter Appliance Management Interface)

Open a browser and go to:
https://<your-vcenter-ip>:5480
(Replace <your-vcenter-ip> with your actual vCenter IP address.)

Log in using the root user. If the password has expired, you’ll be prompted to change it immediately.

Step 2: Change the Expired Root Password

Click the link to change the password. Enter the current (expired) password, then create and confirm a new password. Ensure the new password meets VMware’s password policy.

Click Save. If successful, you’ll see a confirmation message.

Step 3: Verify the Password

Log out and log back in using the new root password to ensure everything is working properly.

Alternate Method: Reset via vSphere Client

If VAMI is inaccessible due to network or system issues, you can change the root password using the vSphere Client.

Step 1: Log into vSphere Client

Log in with an admin-level account.

Go to:
Administration → Single Sign-On → Users and Groups

Locate the root user, then select the option to reset the password.

Step 2: Verify the Password

Log out and back in to confirm the new root password works.

What If You Forgot the Root Password?

If you’ve forgotten the root password and can’t log in via VAMI or vSphere, reset it in single-user mode.

Step 1: Boot into Single User Mode

Reboot the vCenter Server Appliance. At the GRUB menu, press e to edit the boot parameters.

Find the kernel line and append:
rw init=/bin/bash

Press Ctrl + X to boot.

Step 2: Reset the Password

Once in the shell:

passwd

Enter the new password when prompted.

Then reboot the appliance:

reboot

Step 3: Verify Access

After reboot, log in to the VAMI using the new root password to ensure it’s been reset successfully.

Tips for Better Password Management in vCenter

• Enforce MFA and strong password policies.
• Monitor expiration dates using alerts or scheduled reviews.
• Use a password manager for secure tracking.
• Avoid using the root account for daily operations—create and delegate roles with least privilege access.

Final Thoughts

An expired vCenter root password can be a minor inconvenience, but it’s easily fixed. Whether you reset it via the web interface or the console, you’re just a few steps away from regaining access.