Skip to content

Commit 9ce12e2

Browse files
author
Jian Cao
committed
Rotating password of identity source
1 parent 266c0b2 commit 9ce12e2

File tree

1 file changed

+13
-8
lines changed

1 file changed

+13
-8
lines changed

articles/azure-vmware/configure-identity-source-vcenter.md

Lines changed: 13 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -255,17 +255,22 @@ You'll run the `Remove-ExternalIdentitySources` cmdlet to remove all existing ex
255255

256256
## Rotate an existing external identity source account's username and/or password
257257

258-
1. Use the [Get-ExternalIdentitySources](configure-identity-source-vcenter.md#list-external-identity) run command to pull current populated values.
258+
1. Rotate the password of account used for authentication with the AD source in the domain controller.
259259

260-
1. Run [Remove-ExternalIdentitySource](configure-identity-source-vcenter.md#remove-existing-external-identity-sources) and provide DomainName of External Identity source you'd like to rotate.
261-
> [!IMPORTANT]
262-
> If you do not provide a DomainName, all external identity sources will be removed.
260+
1. Select **Run command** > **Packages** > **Update-IdentitySourceCredential**.
263261

264-
1. Run [New-LDAPSIdentitySource](configure-identity-source-vcenter.md#add-active-directory-over-ldap-with-ssl) or [New-LDAPIdentitySource](configure-identity-source-vcenter.md#add-active-directory-over-ldap) depending on your configuration.
262+
1. Provide the required values and the updated password, and then select **Run**.
263+
264+
| **Field** | **Value** |
265+
| --- | --- |
266+
| **Credential** | The domain username and password used for authentication with the AD source (not cloudadmin). The user must be in the **[email protected]** format. |
267+
| **DomainName** | The FQDN of the domain, for example **avslab.local**. |
268+
269+
1. Check **Notifications** or the **Run Execution Status** pane to see the progress.
270+
271+
> [!IMPORTANT]
272+
> If you do not provide a DomainName, all external identity sources will be removed. The command **Update-IdentitySourceCredential** should be run only after the password is rotated in the domain controller.
265273
266-
>[!NOTE]
267-
>There is work to make this an easier process than it is today with a new run command.
268-
>[PR with VMware](https://github.com/vmware/PowerCLI-Example-Scripts/pull/604)
269274

270275
## Next steps
271276

0 commit comments

Comments
 (0)