Unlocking and resetting the vCenter Single Sign On (SSO) administrator password

  • You are unable to log in to the vSphere Web Client using your SSO administrator credentials
  • Logging in to the vSphere Web Client using your SSO administrator credentials fails
  • The password has been incorrectly entered three times (by default)

To unlock an account using another session or using another user account with administrator privileges:

  1. Click Home.
  2. Click Administration.
  3. Click SSO Users and Groups.
  4. Right-click the affected user account, such as admin, and click Unlock.

In emergency situations or if the default policies have been changed, you can also reset the password to unlock the account.To reset the SSO administrator password on a Windows server by command:

Note: Resetting the password will also unlock the administrator account.

  1. Login as an administrator to the vCenter SSO server.
  2. Click Start > Run, type cmd, and click OK. The Command Prompt window opens.
  3. Navigate to the directory SSOInstallDirectory\utils.
    By default, the installation directory isĀ  C:\Program Files\VMware\Infrastructure\SSOServer.
  4. Run this command:
    rsautil reset-admin-password
  5. Enter the master password when prompted.
C:\Program Files\VMware\Infrastructure\SSOServer\utils>rsautil reset-admin-password
Enter master password: ********
Enter administrator's name: admin
Enter new administrator's password: ***********
Confirm new administrator's password: ***********
Password reset successfully
  • The password must be different from your last 5 passwords 

Note: This is the password selected for the SSO administrator during the SSO installation. If you have changed your SSO administrator password later, the master password is still the original one chosen.



Leave a comment

Your email address will not be published. Required fields are marked *