> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.nvidia.com/switch-infrastructure/config-manager/llms.txt.
> For full documentation content, see https://docs.nvidia.com/switch-infrastructure/config-manager/llms-full.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.nvidia.com/switch-infrastructure/config-manager/_mcp/server.

# Site Password Rotation

Rotates user passwords across all devices at a site, with parallel execution and consolidated reporting.

## User Interface

### Form Inputs

| Field               | Description                           | Selection Type                                                                               | Required |
| :------------------ | :------------------------------------ | :------------------------------------------------------------------------------------------- | :------- |
| **Location**        | Choose the site for password rotation | Single dropdown from available sites                                                         | Yes      |
| **Selected Secret** | Choose the user account to rotate     | Single dropdown from configured password mappings                                            | Yes      |
| **Roles**           | Device types to include               | Multi-select from: TAN-Core, TAN-Spine, TAN-Leaf, SMN-Core, SMN-Spine, SMN-Leaf, SMN-Aggleaf | Yes      |
| **Device Status**   | Filter devices by operational status  | Multi-select from: Active, Provisioned                                                       | Yes      |
| **Tenant**          | Tenant context for the site           | Single dropdown from available tenants                                                       | Yes      |

## Workflow Execution

### Execution Stages

1. Get network devices
2. Rotate passwords (parallel child workflows)
3. Display results

### Child Workflows

The site password rotation workflow spawns individual [device password rotation](/switch-infrastructure/config-manager/services/temporal/workflows/device-password-rotation) workflows for each device in parallel. Each device rotation runs independently; failures on individual devices do not block other devices.