finally there i think. Just a case of resetting the root password via the vcsa console (f2). now i can access console/ssh/web. that was a right pain in the @rse. I didnt feel at any time the root password was consistent through each part (web/console/ssh)