An uppercase character that begins a password does not count toward the number of character classes used.Passwords cannot contain a dictionary word or part of a dictionary word.By default, password length should be more than 7 and less than 40.By default, mix of characters from four character classes is used when creating a password.What character classes are we referring to? Password from four different character classes require minimum number of character required is same as that of three character classes i.e. Password from three character classes requires minimum character length of 7. Thats fourth and fifth place holder respectively with below requirement of characters Password is allowed to be created from either three character classes or four character classes. That is what the meaning of first three disabled words.
Also by default, pass phrases are disabled as in above format. So to put it in simple words, ESXi password cannot contain characters from only one class or only two classes. Number of characters required if the password contains characters from four character classes.Number of minimum characters required if the password contains characters from three character classes.Number of minimum characters required if the password contains a phrase.Number of minimum characters required if the password contains characters from two character classes.Number of minimum characters required if the password contains only one character class.In above setting, Minimum requirement for password is denoted by five place holders (after min=) namely disabled, disabled, disabled, 7, and 7. The above statement also has the same meaning as first entry as Retry=3 min=disabled,disabled,disabled,7,7 As you can see, it is similar to that of what we had in ESXi 6.0 and its predecessor’s as well.