VMware Workstation

 View Only

Workstation Pro 25H2u1 for Windows: Read-only verification of "Remember password" in a non-elevated session

  • 1.  Workstation Pro 25H2u1 for Windows: Read-only verification of "Remember password" in a non-elevated session

    Posted 12 days ago

    I am using VMware Workstation Pro 25H2u1, build 25219725, on Windows. I would like to verify the current "Remember password" state for one Windows user and one existing partially encrypted VM.

    The proposed check must run in a non-elevated Windows session, without "Run as administrator" or UAC elevation. I distinguish account membership in the Administrators group from whether the process is elevated.

    The 25H2 documentation, "Encrypting Virtual Machines," states that selecting "Remember password" stores the password in Windows Credential Manager:
    https://techdocs.broadcom.com/us/en/vmware-cis/desktop-hypervisors/workstation-pro/25H2/using-vmware-workstation-pro/configuring-and-managing-virtual-machines/encrypting-and-restricting-virtual-machines-ws-guide.html

    I do not consider failure to identify a matching item in the visible credential list to be evidence that password storage is disabled. I also distinguish the checkbox during VM creation from the completed VM's current storage state.

    Could you provide manufacturer documentation or a supported procedure applicable to this build that answers these questions?

    1. Is there a supported read-only GUI, API, or metadata query to inspect the current state without powering on the VM, closing the VM or Workstation, changing settings, entering or retrieving a password, or editing or deleting credentials? If a checkbox is displayed, does it show existing storage state or only a choice for a new password entry?

    2. How does the method identify the exact Windows user and VM? For Windows Credential Manager, please specify the credential type, target-name or identifier rules, and limitations involving VM renaming or relocation. Does the method require access to secret data?

    3. What precisely does an "off" result, or absence of an exactly identified credential, establish? Please distinguish future save preferences, previously stored passwords, and an already unlocked VM. How are read failures, insufficient permissions, and unsupported versions distinguished from a valid negative result?

    If no supported method satisfies these constraints, please state that and describe the prerequisites or operations required. Any such operations would be reviewed separately before execution.

    Please identify the applicable product version/build and provide supporting manufacturer documentation URLs. Please also distinguish personal experience or advice from an explanation provided in a manufacturer capacity.

    I will not submit passwords, credential contents, device identifiers, full VMX files, or other private VM-specific material.



    ------------------------------
    Keisuke Konishi
    ------------------------------