PowerShell Script for VCF password management in sandbox lab

[DangerMouse74]

Hello, fellow scripters!

I have a small, but licensed, VCF lab in a sandbox environment that I keep running perpetually to make quick tests, training content, etc...

I would like to create a PowerShell Script to disable password expiry in this sandbox lab for all of the VCF components.

The reason is that my employer requires that we maintain current records for service and local accounts in our CyberArk, which is somewhat of a pain with VCF password expirations and rotations and whatnot.

Have any of you done such a thing before?

-------------------------------------------

[ITSavant]

esxcli system account set --id=USERNAME --password-expiry=0
or 
in vCenter for the host advanced settings: Security.PasswordMaxDays and set it to 0 to disable

-------------------------------------------

[DangerMouse74]

Thank you, that's a start.

Do you have any suggestions for the other stuff in the VCF bundle?

-------------------------------------------

[ITSavant]

I've been doing VMware since 2002, I've never used the VCF. If there's something specific, I might have some ideas, but honestly so many companies are moving away from the Broadcom debacle, that I use it less now in favor of oVirt/OLVM. 

-------------------------------------------

[CriticalChance]

Just as an FYI - Now that we are upgraded to 9.1, we can more easily take advantage of password policies and don't really need to script stuff like this anymore.

Check this out:
https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-1/design/design-blueprints-for/infrastructure-modernization/fleet-management-blueprint/vcf-password-management/vcf-password-policy-management.html

-------------------------------------------