Edit Security.AccountUnlockTime through esxcli

[MichaelS823]

Is it possible to set:

Security.AccountUnlockTime

Security.AccountLockFailures

Security.PasswordHistory

through esxcli? Can only find examples for PowerCli which is not possible for me.

[Lalegre]

Hey @MichaelS823,

No it is not, as the only variables available to change by using ESXCLI are the ones coming from the output of: esxcli system settings advanced list

If you see the output and grep "Security" you will see that they are not there.

Regards!

[MichaelS823]

Ok thank you.

[JessOlson]

I know that this is about a year late, but for whoever comes across this with the same question here's the answer. I was trying to figure out how to do this, and it took a couple days to come up with a way to do it. Note - I'm told that vim-cmd is being depreciated, but it has been "being depreciated" for some time now. Works fine on ESXi 7.

vim-cmd hostsvc/advopt/update Security.AccountUnlockTime int 900
vim-cmd hostsvc/advopt/update Security.AccountLockFailures int 5
vim-cmd hostsvc/advopt/update Security.PasswordHistory int 0
# and a bonus:
vim-cmd hostsvc/advopt/update Security.PasswordQualityControl string "retry=3 min=disabled,disabled,disabled,7,7"

[Aviator20111014]

Hi.

It is never too late - this is exactly what I was looking for. 😃

Cheers

David