VxRail: Changing VxRail Service VM Passwords

The passwords for the service VMs can be changed or reset using the following instructions.

VxRail Manager:

• mystic account - Can be changed with passwd command

passwd mystic

If the mystic account has been locked after three failed login attempts, this account can be unlocked using the root account as follows:

1. Open vCenter web UI. Launch VxRail Manager's web console and log in new VxRail Manager with root user.
2. Run the following command to unlock the mystic account:

pam_tally2 --user=mystic --reset

3. Now confirm that you can ssh to the VxRail Manager with mystic account, without a lock issue.

• root account- Can be changed with the passwd command

passwd root

If you do not have access to the VxRail Manager root account, follow Resetting the root password for Dell VxRail Manager to reset the password and regain access.

• service account - Can be changed with passwd command

passwd service

This account is used by Dell services and the password is set at first run install, starting in version 7.0.350. It uses the same password that is associated with the mystic account if the cluster was upgraded from an older <7.0.350 release. It should be maintained by the customer.

Changing Passwords for Default Accounts (root and mystic)

Starting from version 8.0.380, VxRail provides multiple methods for changing the passwords of the default root and mystic accounts on the VxRail Manager.

1. Public API
   Use the following curl example to change the password through the VxRail Manager public API:

   curl -k --user {vc_admin_account}:{vc_admin_password} -X PUT -H 'Content-Type: application/json' -d '[{"component":"VXM", "hostname":"","username":"{root or mystic}","current_password":"****","new_password":"****"}]' https://{vxrail_manager_ip}/rest/vxm/v4/system/credential

2. Ansible
   Install the VxRail Ansible module by following the instructions in the README:
   GitHub - dell/ansible-vxrail (External Link)
   After installation, you can use the following Ansible example to change the password:

   ansible-playbook -vvv system_update_credential.yml -e "vxmip={vxrail_manager_ip} vcadmin={vc_admin_account} vcpasswd={vc_admin_password} component=VXM hostname= username={root or mystic} current_password=**** new_password=****“

3. Power Shell
   Install the VxRail PowerShell module by following the instructions in the README:
   GitHub - dell/powershell-vxrail: powershell-vxrail (External Link)
   
   After installation, you can use the following PowerShell example to change the password:

   Update-SystemCredentialv4 -Server localhost:7443 -Username {vc_admin_account} -Password {vc_admin_password} -ComponentName VXM -ComponentHostName vxm -ComponentUsername {root or mystic} -ComponentCurrentPassword **** -ComponentNewPassword ****

vCenter Server:

• administrator@vsphere.local account -

1. Log in to the vSphere Web Client with an SSO administrator user.
2. Click Administration.
3. Click Users and Groups under Single Sign-On.
4. Right-click Administrator under the Users tab.
5. Click Edit User.
6. Change the password for the Administrator.

• root account - Can be changed with the passwd command

passwd root

If you do not have access to the vCenter root account, follow https://kb.vmware.com/s/article/2147144(External Link) to reset the password.

Platform Services Controller (if applicable)

• root - Can be changed with the passwd command

passwd root

If you do not have access to the PSC root account, follow https://kb.vmware.com/s/article/2147144(External Link) to reset the password.

Witness (if applicable):

• root account - Can be changed with the passwd command

passwd root

If you do not have access to the ESXi witness root account, engage the VxRail support team as the witness must be redeployed.

Video: Changing VxRail Service VM passwords