VMware Cloud on AWS and NSX-T Authentication

You can authenticate to VMware Cloud on AWS or NSX-T by using a refresh token.

You can obtain a refresh token from your VMware Cloud on AWS user profile under the Access Tokens area, or from the VMware Cloud on AWS administrators in your organization. After you receive a refresh token, you can provide it to DCLI when prompted. DCLI prompts for a refresh token when you try to access the VMware Cloud on AWS or NSX-T API.

The following example shows syntax for VMware Cloud on AWS.

dcli +vmc +i 
Refresh Token:

The following example shows syntax for NSX-T.

dcli +nsx <mynsxtaddress> +i 
Refresh Token:

The refresh token is provided in a secure way. Be careful that you are using the copy/paste functionality of your terminal correctly to avoid pasting the refresh token more than once. After you provide the refresh token, DCLI asks whether you want to save it to the credential store. If you choose to save the refresh token, you will not need to provide it each time you connect to VMware Cloud on AWS or NSX-T.

DCLI supports storing multiple refresh tokens in the credential store. Each refresh token stored in the credential store also keeps information about the user and organization ID associated with the token.

If you provide the --org parameter or connect through an NSX-T endpoint, DCLI prompts for the refresh token for that organization.

dcli> orgs sddcs list --org a57c766d-04e9-470f-a8ea-6846d2fe6b5a
Refresh Token (for Organization with ID a57c766d-04e9-470f-a8ea-6846d2fe6b5a):