Create Password Policies

You can create a password policy to assign the policy to user accounts. You do not need to associate a password policy with a user account, but it does help in managing your security.

About this task

Before you begin, you need the following information:

Field

Description

Policy ID

ID that identifies the password policy in the database.

Policy Name

Policy name that displays in the user interface when any reference is made to the password policy.

Number of days valid

Number of days that a user password is valid. The default is 0, which means the password never expires.

If you supply a value between 1 and 999, the user is prompted to change the password when this time period expires. The expiration count down starts the first time a user logs in after a password is assigned to the user account.

Minimum Length

Minimum length that the password must be. Required. Valid values are any numerals. This number must be set to at least the number 6. The default value is 6. If no policy is applied, the system enforces a minimum length of 6.

Maximum Length

Maximum length that the password can be. Required. Valid values are any numerals. This number must be set to at least the same number as the minimum length. The default value is 28.

Number of passwords kept in history

Number of passwords to keep in the PWD_HISTORY table in the database for a user. After this number of passwords is exceeded, the oldest password is removed from the table and can be re-used by the user. The default value is 0.

Password required to contain special characters

Specifies that the password must contain at least one special character. Valid values include !, @, #, $, %, ^, &, or *.

Required password change on first login attempt

Specifies that the user must change the default password after the initial log in. This prompts the user to change the password after logging in for the first time.

To create a password policy:

Procedure

  1. From the Administration Menu, select Accounts > Password Policy.
  2. Next to Create a new Password Policy, click Go!
  3. In the Password Policy page, enter the Policy ID.
  4. Enter the Policy Name.
  5. Enter the Number of days valid.
  6. Enter the Minimum Length.
  7. Enter the Maximum Length.
  8. Enter the Number of passwords kept in history.
  9. If the password is required to contain special characters, select the checkbox.
  10. If the user is required to change the password change on first login attempt, select the checkbox.
  11. Click Next.
  12. Review the password policy settings.
  13. Click Finish.