Top

Unlock ESXi root account from host client

by

Yves Sandfort

By
Yves Sandfort
and

As I do quite a bit of lab development and support I see often people lock themselves out of the ESXi web based host client. Keep in mind this only locks you out from ssh and the web console. Password lockout is NOT active on the console/DCUI. Below is how you reset the counter and regain access.

Procedure to unlock the ESXi host account at the console

  1. At the console press CTRL+ALT+F2 to get to the ESXi shell. If a login shows up continue with step 3, otherwise continue with step 2.
  2. Login to the DCUI (to enable the ESXi Shell if not already done)
  3. Login with root and the correct password.
  4. Go to Troubleshooting Options
  5. Select Enable ESXi Shell
  6. Press CTRL+ALT+F1
  7. At the ESXi shell login with root and the password
  8. Run the following commands to show number of failed attempts:


pam_tally2 --user root

Run the following command to unlock the root account:

pam_tally2 --user root --reset

Questions?

Questions?

Ask

Yves

Thank you! Your message has been sent!
Oops! Something went wrong while submitting the form.