diff --git a/pkg/hostman/diskutils/qemu_kvm/driver.go b/pkg/hostman/diskutils/qemu_kvm/driver.go
index 138f4cbc73a..06d1a5b8a2a 100644
--- a/pkg/hostman/diskutils/qemu_kvm/driver.go
+++ b/pkg/hostman/diskutils/qemu_kvm/driver.go
@@ -620,7 +620,15 @@ func (d *QemuBaseDriver) startCmds(
 
 	if sysutils.IsKvmSupport() {
 		cmd += __("-enable-kvm")
-		cmd += __("-cpu host")
+		isCPUIntel := sysutils.IsProcessorIntel()
+		isCPUAMD := sysutils.IsProcessorAmd()
+		if isCPUIntel {
+			cmd += __("-cpu host,vendor=GenuineIntel")
+		} else if isCPUAMD {
+			cmd += __("-cpu host,vendor=AuthenticAMD")
+		} else {
+			cmd += __("-cpu host")
+		}
 	} else {
 		cmd += __("-cpu max")
 	}
diff --git a/pkg/hostman/guestman/guestman.go b/pkg/hostman/guestman/guestman.go
index 5e093e28fe1..9e632f913f7 100644
--- a/pkg/hostman/guestman/guestman.go
+++ b/pkg/hostman/guestman/guestman.go
@@ -794,7 +794,7 @@ func (m *SGuestManager) startDeploy(
 	password, _ := deployParams.Body.GetString("password")
 	resetPassword := jsonutils.QueryBoolean(deployParams.Body, "reset_password", false)
 	if resetPassword && len(password) == 0 {
-		password = seclib.RandomPassword(12)
+		password = seclib.RandomPassword2(14)
 	}
 	enableCloudInit := jsonutils.QueryBoolean(deployParams.Body, "enable_cloud_init", false)
 	loginAccount, _ := deployParams.Body.GetString("login_account")