All is there a way to prove that a root password was changed and when?
Could you check if the following link helps https://www.reddit.com/r/vmware/comments/sctbh/esx_and_esxi_root_password_change_question/
Thanks and that helps but I want something along the lines of a log showing it was changed for a compliance request.
I can't tell you where (in which log file) a password change gets logged.
However, you can find out when a user's password was last change running e.g.
chage -l root
André
