Are these user accounts the local or the Single Sign-On accounts?
I'm not sure if this is what you are going through, but I've gone through it once and now I think I'm going through it again.
In my case I built out the VCSA 6.7 suite using the root and my created Admin account. Later on I built a Single Sign-On (SSO) account which is different. Most of my work has been using the SSO account.
After 60 days if you don't log into the local accounts they lock out and there's no "One Time Only" update your password. When this happened to me the first time I had to do a password recovery. Below are some of my notes that I have to remind me. I would have to review them to remember what to do. This had to be done to both the VCSA and hosts.
Search String:
vcenter server appliance management interface 6.7 locked out
https://martinsblog.dk/vcenter-server-appliance-root-password-expired-6-x/
https://kb.vmware.com/s/article/2147144
How to reset the lost or forgotten root password in vCenter Server Appliance 6.5 & 6.7 (2147144)
Process to Reset the Root Password in VCSA:
To reset the lost forgotten root password in vCenter Server Appliance follow the steps below:
Take a snapshot or backup of the vCenter Server Appliance before proceeding. Do not skip this step.
Reboot the vCenter Server Appliance
After the VCSA Photon OS starts, press e key to enter the GNU GRUB Edit Menu.
Locate the line that begins with the word Linux.
Append these entries to the end of the line:
rw init=/bin/bash
The line should look like the following screenshot:
Press F10 to continue booting.
Run the command mount -o remount,rw /
In the Command prompt, enter the command passwd and provide a new root password (twice for confirmation):
passwd
Unmount the filesystem by running this command:
umount /
Reboot the vCenter Server Appliance by running this command:
reboot -f
Confirm that you can access the vCenter Server Appliance using the new root password.
Remove the snapshot taken in Step 1 if applicable.
