so you can log in like over ssh using root&password but cannot access the host ui (https://hostname/ui) with the same credentials?

Or are you talking about the DCUI (yellow/black console window)?

It sounds like you're in lockdown mode. Try disabling it in the DCUI (HOW TO: Enable or Disable Lockdown Mode on VMware vSphere ESXi host | vStrong.info )

You have to installed embedded client on ESXI.

If you have SSH access then install it using below command and retry via UI.

esxcli software vib install -v http://download3.vmware.com/software/vmw-tools/esxui/esxui-signed-5744014.vib

I think there is a embedded client already shipped with the GA of ESXi 6.5

I'd try to reset your password. You can do it on the shell or in the DCUI and try to login in with the newly set password on the host client.

If you can login to ssh and dcui you have access to the host. If there is no vCenter server you can't have lockdown mode.

Hi,

if you some sort of monitoring server that is probing that host. it could be that the root account is locked out. you can change the lockout time to 0 and try it or fix the monitoring system to use the proper password and wait the default lockout time and you should be able to logon. But it sounds like something or someone is hammering that host with root logon using the wrong credentials.

Lionel.

I don't have nagios monitoring so whats blocking me from accessing the client?

I can login in shell/ssh but not in client with root username

Hi ,

Same issue . root account is not locked  and able to access through console not from web

Rebooting the host solved issue .

Rebooting the host did not work for me.

Is this related to correct IP address of the machine? I had to set a static IP.

Hi ,

if you have static IP then its good but it is not related IP  .

You may have to disable the lockout or account lock  . And reset management networks , host services  or reboot is the options

What are you typing in the url?

Cause :- Root account is locked and some time monitoring system will not unlock automatically.

1. Try to login through SSH/WinScp/VI-Client/host UI on host after checked "lock-down mode" 

2. If step #1 fail; Login on  vCenter >>> Select Host >>> Security Profile >> Restart SSH service

3. Try to login through SSH/WinScp/VI-Client/host UI on host and root password would be working.

Note:- Starting with vSphere 6.x, account locking is supported for access through SSH and through the vSphere Web Services SDK. The Direct Console Interface (DCUI) and the ESXi Shell do not support account lockout.

A maximum failed attempts is allowed before the account is locked (login on host UI - https://hostname/ui >>>System>>>Advanced settings>>>Check "SecurityLockFailures" and "SecurityAccountUnlockTime")

Hello

if you have access to console enable shell and use the following commang for it' works well pam_tally2 --user root --reset.

Thanks to Kimi Thang http://kimizhang.com/unlook-root-account-for-vmware-esxi-host/

Have a nice day.

Eric