IDPA Procedure to update the correct ESX Host password in ACM

Summary: This procedure walks you through updating the correct ESX host password in IDPA ACM machine.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Firstly, The passwords for "root" user on all ESX hosts should be verified.

User can follow below process to reset ESXi default passwords:

  1. Connect to ESXi using ssh as root with current known password.
  2. Run the  dcui  command.
  3. Press F2 to do ESXi customization.
  4. Log in using current credentials.
  5. Select  Configure Password  to change the root password.
  6. Ctrl + c to exit DCUI screen.
The password can be changed manually as well using "passwd root" command.

You can log in to the ESX host and run this command: passwd root
It will ask you enter the password and confirm the same.

If the ESX password is out of sync and if it does not match on All ESX hosts, it can cause issues with Upgrades, ACM homepage showing red Exclamation and various other issues.

This KB procedure walks you through updating this password in ACM.

Cause

None

Resolution

Once the password has been verified for the ESX hosts, make the appropriate changes in "InfrastructureComponents.xml".
This can be done via the 'sync_Switch_Server_ESX_Passwords.sh' tool on ACM:

Sync ESX servers password:

Change directory to location of script:

# cd /usr/local/dataprotection/customscripts/tools 

#./sync_Switch_Server_ESX_Passwords.sh -d -I <ESX-1-ip-address>  -P "<password>"  -I <ESX-2-ip-address>  -P "<password>"  -I <ESX-3-ip-address>  -P "<password>"

Example:

#./sync_Switch_Server_ESX_Passwords.sh -d -I 192.168.1.10  -P "abc123"  -I 192.168.1.11  -P "abc123"  -I 192.168.1.12 -P "abc123"

 

Where:
ESXi host 1 is: 192.168.1.10
new password is abc123

ESXi host 2 is: 192.168.1.11
new password is abc123

Please note, if the password does not match on All ESX hosts, it can cause issues with Upgrades, ACM homepage showing red Exclamation and various other issues.

This does not change the password on the host, but will update the configuration files on ACM with new password that has already been set.

 

./sync_Switch_Server_ESX_Passwords.sh [-h]                           #for help

                                      [-d]                           #for enabling debug

                                      [-i] <SERVER_IP>               #for setting server IP as key

                                      [-p] <SERVER_PASSWORD>         #for setting server password                               

                                      [-W] <SWITCH_PASSWORD>         #for setting switch password

                                      [-I] <ESX_IP>                  #for setting esx IP as key

                                      [-P] <ESX_PASSWORD>            #for setting esx password
 

Additional Information

To update the new ESXi password manually in the ACM manually:

Log in to ACM as "root" user.

1: Traverse to the config directory: cd /usr/local/dataprotection/var/configmgr/server_data/config
2: Open the "InfrastructureComponents.xml" file to edit and make the appropriate changes: vi InfrastructureComponents.xml
3: Change the <password isEncrypted> flag to false:  <password isEncrypted="false">
4: Enter the password in clear text format:
    <ESXiHosts>
        <ESXi>
            <ipAddress>10.60.37.61</ipAddress>
            <password isEncrypted="false">Enter_clear_text_password_here</password>
        </ESXi>
    </ESXiHosts>

Make the changes for all hosts and then restart the dataprotection_webapp service.

5: Run: service dataprotection_webapp restart
This will change the updated password back in encrypted format.

Note: Do not restart this service if you are in the middle of a deployment or an Upgrade process as it can cause issues.

Additionally, we can update the current vCenter password as well in this file and then run vCenter password sync script to update the correct vCenter password in componentcredentials.xml.

If user wants to change the IDPA vCenter root user password then they can do so through vCenter CLI. 
User can also change the vCenter root password from https://vcenterip:5480/URL as well.
Once the vCenter root password is changed, user must follow below process to sync the vCenter password in ACM:

  1. Copy the sync_vcenter_password.sh script to ACM.
  2. Change the permission of this script to executable: chmod +x sync_vcenter_password.sh
  3. Change the permission of this script to executable: chmod +x sync_vcenter_password.sh
  4. Wait for script to get complete its operation.
Note: If the vcenter password is changed, it should be updated in the Avamar as well to avoid issues with Internal IDPA backups.
 

Updating the vCenter credentials in Avamar:

Once the vCenter root password is changed, login to Avamar UI and set the vCenter client password.
Administration -> Select vCenter domain -> right click on the client-> click edit -> change the password.

Affected Products

Integrated Data Protection Appliance Family

Products

PowerProtect Data Protection Software, Integrated Data Protection Appliance Family, Integrated Data Protection Appliance Software
Article Properties
Article Number: 000168145
Article Type: Solution
Last Modified: 11 Feb 2025
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.