SaumyaAricent
Contributor
Contributor

Vmware 6.5 got locked out

Vmware 6.5 got locked out for more than 1 hour and we are not able to login SSH as well as Vmware UI.

0 Kudos
5 Replies
SaumyaAricent
Contributor
Contributor

Hi *,

I am able not to access SSH and WebAccess with "root" & password. The password is the same, there are no spell / keyboard language issues.

We have a single ESXi 6.5 , no vCenter.

Best regards

Saumya Jain

0 Kudos
aleex42
Enthusiast
Enthusiast

If your "root" user was locked just wait up to 900 seconds to get unlocked.

Or if you don't have any important VMs: reboot your hypervisor, this will unlock your account, too.

I have this problem, too. Some chinese hackers are brutforcing my root account all the time so it gets locked every half hour Smiley Happy

Workaround: very very high secure password for "root" and user "root2" for your daily doing. They don't bruteforce user "root2" (in my case).

Hope to help Smiley Happy

-- Alex (VMware VCAP-DCV, NetApp NCIE, LPIC 2)
0 Kudos
SaumyaAricent
Contributor
Contributor

Thanks alot Aleex.

Does rebooting my hypervisor will impact VM's?

0 Kudos
aleex42
Enthusiast
Enthusiast

Yes, rebooting hypervisor means downtime for your VMs.

So better just wait for the 900 seconds and retry your login without rebooting Smiley Happy

-- Alex (VMware VCAP-DCV, NetApp NCIE, LPIC 2)
0 Kudos
IRIX201110141
Virtuoso
Virtuoso

Even if the root user is locked out on SSH, VAMI... you can login into DCUI which means on the "console". Only login over the network is not possible but on the Host directly it should work.

For me the main reason is always the same. If we replace the Host Hardware on customer sites, often we have to reuse the IP and Hostname. With preinstalled ESXi from HW Vendor and more strong password rules from ESXi these passwords doesnt match to the old one at first. But most customers running countless monitoring tools and use the "root" for that so the account locked after a couple of minutes. It took some time to figure this out  Smiley Happy

Regards,

Joerg

0 Kudos