When we create a password, we need to include a mix of characters from three or four character classes: lowercase letters, uppercase letters, numbers, and special characters such as underscore.
The password policy in ESXi 6 has following requirements:
- Passwords must contain characters from at least three character classes.
- Passwords containing characters from three character classes must be at least seven characters long.
- Passwords containing characters from all four character classes must be at least seven characters long.
- An uppercase character that begins a password does not count toward the number of character classes used.
- A number that ends a password does not count toward the number of character classes used.
- The password cannot contain a dictionary word or part of a dictionary word.
“ESXi 5: retry=3 min=8,8,8,7,6”
It means that passwords with one character class, two character classes and pass phases are not allowed, as indicated by the first three disabled items.
Passwords from three and four character classes require at least seven characters.