Implementing password policies

If you require a password to authenticate users, you can configure IBM® Sterling Control Center Monitor to accept only passwords that conform to your company password policy.

Password policies are set in IBM Sterling Control Center Monitor by modifying the passwordPolicy.xml file in the IBM Sterling Control Center Monitor web console by clicking Menu Button () > System Settings > Properties > passwordPolicy.xml. If you implement a password policy, the policy criteria is enforced only for the following users:
  • Existing users who change their password
  • New users who are added after the passwordPolicy.xml file is modified and put into effect

If you do not edit the passwordPolicy.xml file, no password policy is in effect, other than “Passwords should not include username”, for IBM Sterling Control Center Monitor. Password policy settings include the following criteria:

  • Minimum and maximum password length
  • Requiring lowercase, uppercase, and special (non-alphanumeric) characters in the password
  • Excluding lowercase, uppercase, and special characters in the password
  • Passwords should not include username
  • Using regular expressions (regex) to define specific password patterns
  • Using regular expressions (regex) to define specific patterns to exclude