Which VMware Cloud Foundation Domain Component “root” account cannot be updated using the VCF Operations...

The correct answer is SDDC Manager . In VCF 9.0 password management, VCF Operations can manage many component credentials from Fleet Management > Passwords , including update and remediate operations for supported accounts. However, SDDC Manager is a special case. The documentation lists the VCF Instance/domain components managed from the VCF Operations console as ESX , NSX Manager , vCenter , and SDDC Manager backup password only . The SDDC Manager root and vcf accounts are not updated through the VCF Operations UI password workflow. Instead, the documented SDDC Manager account table shows that the vcf and root accounts are manually managed by using the operating system, while only the backup account is updated or remediated by using the VCF Operations UI or API . By contrast, the vCenter root account, NSX Local Manager root account, and ESX root account are listed as accounts that can be updated or remediated using the VCF Operations UI or API . Reference topic: Objective 4.14 – Complete Fleet Management activities in VCF Operations / Password Management / component account lifecycle management .