Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
 
Search the VMware Knowledge Base (KB)   View by Article ID
 

Installing vCenter Single Sign On fails with the error: Unable to create database users: Password validation failed (2035949)

Symptoms

  • When you attempt to install vCenter Single Sign On (SSO) using an existing database or the bundled SQL Express database, the installation fails.
  • The vCenter Server 5.1 installer displays the error:

    Error 29114. Cannot connect to DB

  • When you view the installer log in C:\Program Files\VMware\Infrastructure\SSOServer\utils\logs\install.log, you see errors similar to:

    2012-09-17 13:47:17,484 - Hostname.domain.com,,,,Creating database users
    2012-09-17 13:47:17,703 - Hostname.domain.com,,,,Processing SQL file: /rsaIMSLiteMSSQLSetupUsers.sql
    2012-09-17 13:47:17,859 - Hostname.domain.com,,,,ERROR: Unable to create database users: Password validation failed. The password does not meet Windows policy requirements because it is too short.
    com.rsa.tools.common.action.exception.ExitException: Unable to create database users: Password validation failed. The password does not meet Windows policy requirements because it is too short.

Cause

The passwords for the RSA_USER and RSA_DBA users are automatically generated by the SSO installation script, unless these users are manually created.

This issue occurs when the environment where SSO is being installed has password complexity policies that are more strict than the default password generated by the SSO installer.

Resolution

This issue is resolved in VMware vCenter Server 5.1.0a released on October 25, 2012.
 
To download vCenter Server 5.1.0a, see the VMware Download Center.

Note: There are two different database methodologies that can be used when installing SSO, either using the bundled version of SQL Express that will install automatically, or using a standalone full version of MS SQL which has already been installed and configured. For more information, see the vSphere Installation and Setup Guide.

To work around this issue if you are not able to upgrade:
  • Install SSO on a machine that is not in the domain, or does not have specific password policy requirements.

  • If installing SSO outside the domain is not an option in your environment, use one of these workarounds depending on the database in use:

    • To work around this issue when using the bundled SQL Express:

      1. Remove the SSO server from the domain and reboot.
      2. Install SSO using the bundled SQL Express, and verify the vCenter Single Sign On service is running.
      3. Connect to the database (.\VIM_SQLEXP) using SQL Management Studio Express and change the RSA_USER password to comply with the policies in the environment.
      4. Update the SSO configuration:

        1. Open a command prompt and navigate to C:\Program Files\VMware\Infrastructure\SSOServer\utils, and run this command:

          ssocli configure-riat -a configure-db --rsa-user-password -m

        2. Update the C:\Program Files\VMware\Infrastructure\SSOServer\webapps\lookupservice\WEB-INF\classes\config.properties file to reflect the new password. Search for this line and edit it:

          db.pass=new_password

      5. Restart the SSO service to verify that it starts.
      6. Join the SSO server back to the domain.
      7. Verify the vCenter Single Sign On service is running.

    • To work around this issue when using the full version of MS SQL:

      1. Create the RSA_USER and RSA_DBA users using the provided script, and ensure that you use a password which complies with the installation environment. (The script is named rsaIMSLiteMSSQLSetupUsers.sql, and is included on the vCenter Server 5.1 install media.) For more information on RSA user creation, see the vSphere Installation and Setup Guide.

      2. Install SSO, ensuring that you select the Use manually created DB users option on the Database Information page of the wizard process.

Update History

09/25/2012 - Added steps for changing RSA password for SQL Express. 11/13/2012 - Added resolved with link to download center.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 13 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)
  • 13 Ratings
Actions
KB: