VMware SSO System-Domain password expire

This post is about VMware SSO System-Domain password expire issues.

Did you install VMWare Vcenter 5 on a Windows 2008 Server system more than a year ago and now you dealing with login problems installing VMWare vSphere Web Client?
Sure you did use the correct password you created at the initial setup of your vCenter Server installation, no doubts about that! Never mind, this is VMware and not Microsoft, so all is taking care of.

How to deal with VMware SSO System-Domain password expire issues.

By default, a VMware Single Sign-on SSO System-Domain password expires after one year. So that’s why during installation of VMWare vSphere Web Client you receive this message:

The provided credentials are not valid. Please check VM_ssoreg.log in system temporary folder for details. Analyzing the log file you will find this message:

Return code is: InvalidCredentials


The log file location is typically found here:

C:\Users\Administrator\AppData\Local\Temp\ or

Solving VMware SSO System-Domain password expire issues is quite easy. You need to change the default password and create a new one.

How? Read further.

How to reset SSO System-Domain password:

On the vCenter Server windows host:

  1. Open an elevated command prompt and run the command:SET JAVA_HOME=C:\Program Files\VMware\Infrastructure\jre
    Note: This is the default path of the JRE folder for vCenter Server 5.1. If vCenter Server has been installed in a custom location, change command accordingly.
  2. Navigate to the ssolscli directoryc:\>cd C:\Program Files\VMware\Infrastructure\SSOServer\ssolscli
  3. Run the following command:ssopass -d https://FQDN_of_SSO_server:7444/lookupservice/sdk username
  4. Type your current password, even if it is expired.
  5. Type the new password, and then type it again to confirm.

That’s all you need to do. VMware SSO System-Domain password expire problem solved! Now you can continue the VMWare vSphere Web Client setup and complete the installation. Once finished check the vSphere Web Client link address if you did well:



Default VMware vSphere 5.1 SSO Password Policy:

Maximum lifetime: 365 days
Restrict re-use: users cannot reuse any previous 5 passwords
Maximum length: 32
Minimum length: 8
Character requirements: At least 6 alphabetic characters
At least 1 special character
At least 0 uppercase characters
At least 0 lowercase characters
At least 0 numeric characters
Identical adjacent characters: 2

Link to article:


Terms And Conditions Of Use
© 2013 Datamirage.All content provided on this blog is for informational purposes only. The owner of this blog makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this site. The owner of Datamirage will not be liable for any errors or omissions in this information nor for the availability of this information. The owner will not be liable for any losses, injuries, or damages from the display or use of this information.