With 11.7 enforced password expiry came about. Seems to be maximum of 121 days before the passwords must be changed. All accounts other than the deploy_admin account can and should be reset from the webUI without adverse effects, when prompted after expiry.
DO NOT reset the deploy_admin password from the webUI when prompted after expiry.
Reset the deploy_admin password from CLI with the following command.
# nw-manage --update-deploy-admin-pw
In the event the deploy_admin was reset from the webUI follow these steps. The status commands are to see if the service is hung or running, prior to restarting.
# systemctl status rabbitmq-server
# systemctl restart rabbitmq-server
# systemctl status jetty
# systemctl restart jetty
# systemctl status rsa-nw-security-server
# systemctl restart rsa-nw-security-server
# systemctl status mongod
# systemctl restart mongod
Restarting the above services will allow the webUI changed password for deploy_admin to populate across all the services. Now the deploy_admin password should login with recent changed password.