Password Best Practices; User Account And Password Requirements - HP StoreOnce 2700 Installation And Configuration Manual

Once the StoreOnce Backup system has been joined to an AD domain, you can configure external
users or external groups on the StoreOnce Backup system. The users or groups must already exist
on the AD domain. You can add AD domain users or groups with access to all StoreOnce features
or you can add them as Local Administrators for the CIFS server only. When you add AD domain
users through the CIFS server tab they are automatically created as Local Administrators, whether
or not they are admin users on the AD domain. This provides a way of implementing Delegated
Administration, which is not available for the StoreOnce device from the Active Directory
Management tool.
Only the name is required to configure AD users or groups on the StoreOnce Backup system;
passwords are configured on the AD domain server.

Password best practices

Changing the passwords for the default user accounts (Administrator, Operator,
HPresetpassword and iLO) after installation is strongly recommended. Be sure to make a note
of the new passwords and save them to a secure location, such as an offline Password Security
tool.
NOTE:
be changed back to admin as this password is not sufficiently complex. The only way to revert
that password back to admin is via the HPresetpassword account which is only available on
the local console of the device.
As you create new users, use the StoreOnce CLI system save config command to save
details of the new user accounts. This command does not save the password details, so
passwords for additional users should also be saved offline and kept in sync with the details
held on the HP StoreOnce Backup system.

User account and password requirements

Local accounts can be between 1 & 16 characters in length and contain only alpha/numeric
and the following symbols - _
External names may be up to 256 characters in length and contain alpha/numerics and the
following symbols: ~`!#$%()_-{}'.@\
New passwords must be between 1 and to 24 characters and may contain only alpha\numerics
and the following symbols !@#$%^&* . The new password may not be the same as the current
password. The new password is not supplied for external users or groups.
Note that once the Admin account password has been changed, its password cannot
Password best practices 27