Setting Global Password Control Parameters - HP 6600 Security Configuration Manual

Step
3. Enable a specific password
control function.
After global password control is enabled, local user passwords configured on the device are not
displayed when you use the corresponding display command.

Setting global password control parameters

The action specified by the password-control login-attempt command takes effect immediately and
affects the users already in the password control blacklist. Other password control configurations take
effect only on users logging in later and passwords configured later.
To set global password control parameters:
Step
1. Enter system view.
2. Set the password aging time.
3. Set the minimum password
update interval.
4. Set the minimum password
length.
5. Configure the password
composition policy.
6. Configure the password
complexity checking policy.
7. Set the maximum number of
history password records for
each user.
Command
password-control { aging |
composition | history | length }
enable
Command
system-view
password-control aging aging-time
password-control password
update interval interval
password-control length length
password-control composition
type-number type-number
[ type-length type-length ]
password-control complexity
{ same-character | user-name }
check
password-control history
max-record-num
206
Remarks
Optional.
All of the four password control
functions are enabled by default.
Remarks
N/A
Optional.
90 days by default.
Optional.
24 hours by default.
Optional.
10 characters by default.
Optional.
•
In non-FIPS mode:
By default, a password must
contain at least one type of
characters and each type must
contain at least one character.
•
In FIPS mode:
By default, a password must
contain four types of characters
and each type must contain at
least one character.
Optional.
By default, the system does not
perform password complexity
checking.
Optional.
4 by default.