The nsroot password that is configured on our Primary/Secondary ADM hosts did not appear to be replicated to the DR node. When accessing the DR node over the VSphere console we can only log into it with the default nsrecover/nsroot username/password. If I update the password for the nsroot and nsrecover accounts on the Primary instance, should this be replicated to the DR node as well?

This is as per design and for security concern wherein by default DR site is accessed through nsrecover/nsroot.

If we have to change the password , we need to on DR site itself 

/mps/change_freebsd_password.sh <username> <password>

The  credential is not relayed through Primary Site for security concern.

Problem Cause

DR site login credential