Changing password requirements

Edit online

You can change the minimum password limit, password length, password expiration, and enable or disable authentication for IBM Storage Protect.

About this task

By enforcing password authentication and managing password restrictions, you protect your data and your servers from potential security risks.

Procedure

Complete the following tasks to change password requirements for IBM Storage Protect servers.
Table 1. Authentication tasks for IBM Storage Protect servers
Task Procedure
Set a limit for invalid password attempts.
  1. On the Servers page in the Operations Center, select the server.
  2. Click Details, and then click the Properties tab.
  3. Set the number of invalid attempts in the Invalid sign-on attempt limit field.

    The default value at installation is 0.
Set a minimum length for passwords.
  1. On the Servers page in the Operations Center, select the server.
  2. Click Details and then click the Properties tab.
  3. Set the number of characters in the Minimum password length field.
Set the expiration period for passwords.
  1. On the Servers page in the Operations Center, select the server.
  2. Click Details and then click the Properties tab.
  3. Set the number of days in the Password common expiration field.
Set a default authentication method. Issue the SET DEFAULTAUTHENTICATION command. For example, to use the server as the default authentication method, issue the following command:
set defaultauthentication local
To update one client node to authenticate with the server, include AUTHENTICATION=LOCAL in the UPDATE NODE command:
update node authentication=local
Set the password complexity for the administrator accounts with SESSIONSECURITY=STRICT. To set the password complexity, issue the following commands and specify the integer values: SET MINPWCHARUPPER, SET MINPWCHARLOWER, SET MINPWCHARNUMERIC, and SET MINPWCHARSPECIAL.

The sum of all the integer values that are specified by using these commands must be less than or equal to 58. Also, this sum of integer values is used as the minimum password length if it is greater than the value of integer that is specified by using the SET MINPWLENGTH command.
Set the password complexity for the administrator accounts with SESSIONSECURITY=TRANSITIONAL. To set the password complexity, issue the following commands and specify the integer values: SET MINPWCHARALPHABETIC, SET MINPWCHARNUMERIC, and SET MINPWCHARSPECIAL.

The sum of all the integer values that are specified by using these commands must be less than or equal to 58. Also, this sum of integer values is used as the minimum password length if it is greater than the value of integer that is specified by using the SET MINPWLENGTH command.
Set up multifactor authentication (MFA) You can set up multifactor authentication (MFA) on an IBM Storage Protect server administrator account to provide an additional layer of protection. For more information, see Configuring multifactor authentication .