Warning: I do not advocate that anyone to make modifications which extend outside of their organizations security policies. Doing so may put account security as risk.
By default, passwords associated with vSphere Single Sign-On expire every 90 days. As a user approaches this expiry point they will be reminded that their password is about to expire.
In my lab I wanted to avoid the need to change my password so frequently so I decided to extend the number of days required between password changes.
The steps below can be followed:
- Log in to the vSphere Web Client as a user with vCenter Single Sign-On administrator privileges
- Browse to Administration > Single Sign-On > Configuration
- Click the Policies tab and select Password Policies
- Click Edit
- Modify the “Maximum Lifetime”
- Click OK
Under the password policies you may take note of various options which can be modified based on your criteria or organization password policy.
Here are the password policy options:
Maximum lifetime:
Maximum number of days that a password can exist before the user must change it.
Restrict reuse:
Number of the user’s previous passwords that cannot be selected. For example, if a user cannot reuse any of the last six passwords, type 6.
Maximum length:
Maximum number of characters that are allowed in the password.
Minimum length:
Minimum number of characters required in the password. The minimum length must be no less than the combined minimum of alphabetic, numeric, and special character requirements.
Character requirements:
Minimum number of different character types that are required in the password. You can specify the number of each type of character, as follows:
- Special: & # %
- Alphabetic: A b c D
- Uppercase: A B C
- Lowercase: a b c
- Numeric: 1 2 3
The minimum number of alphabetic characters must be no less than the combined uppercase and lowercase requirements.
In vSphere 6.0 and later, non-ASCII characters are supported in passwords. In earlier versions of vCenter Single Sign-On, limitations on supported characters exist.
Identical adjacent characters:
Maximum number of identical adjacent characters that are allowed in the password. The number must be greater than 0.
For example, if you enter 1, the following password is not allowed: p@$$word