IDPA 4400 : Come modificare la password root ESXi e sincronizzarla con ACM

Procedura per modificare la password root ESXi e sincronizzarla con ACM:
 
1. Accedere ad ACM utilizzando l'utente root tramite PuTTY e arrestare il servizio webapp. 
Comando: arresto dataprotection_webapp servizio
 
2. Accedere a ESXi utilizzando l'utente root tramite PuTTY e modificare la password root di ESXI con la password comune.
 Comando : passwd
 
Nota: Specificare la password comune fornita durante la configurazione iniziale di ACM.
 
3. Accedere ad ACM utilizzando l'utente root tramite PuTTY
 
4. Creare una copia di InfrastructureComponents.xml
 
comando: cd /usr/local/dataprotection/var/configmgr/server_data/config
 
Comando: cp InfrastructureComponents.xml original_InfrastructureComponents.xml
 
5. Modificare il file dell'infrastruttura e modificare *solo* il tag 'password' come indicato di seguito:
 
Prima della modifica, il file ha l'aspetto seguente:
 

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<InfrastructureComponents>
    <ACM>
        <ipAddress>_customer_ip</ipAddress>
    </ACM>
    <ESXiHosts>
        <ESXi>
            <ipAddress>_customer_ip</ipAddress>
            <privateIpAddress>_customer_ip</privateIpAddress>
            <username>root</username>
            <password isEncrypted="true">nKWguK4OP0WU76mnsCY1+ScouI4Bgt9aJBtaYpLoHiO6XjXQuQ==</password>
            <isIdpaUserCreated>false</isIdpaUserCreated>
            <isRootPasswordChanged>false</isRootPasswordChanged>
        </ESXi>
    </ESXiHosts>
</InfrastructureComponents>


 Where the field highlighted in yellow can be different for different system, it is just a encrypted string.
 
 After modification, the file looks like this:
 

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<InfrastructureComponents>
    <ACM>
        <ipAddress>_customer_ip</ipAddress>
    </ACM>
    <ESXiHosts>
        <ESXi>
            <ipAddress>_customer_ip</ipAddress>
            <privateIpAddress>_customer_ip</privateIpAddress>
            <username>root</username>
            <password isEncrypted="false">**COMMON_PASSWORD**</password>
            <isIdpaUserCreated>false</isIdpaUserCreated>
            <isRootPasswordChanged>false</isRootPasswordChanged>
        </ESXi>
    </ESXiHosts>
</InfrastructureComponents>

Where **COMMON_PASSWORD** is your common password.

 
6. Start the ACM Service using the below command:
Command: service dataprotection_webapp start
 
7. Wait 10 minutes. Check the InfrastructureComponents.xml and make sure that the password tag value has changed for 'isEncrypted' = 'true'.