Password Not Displayed In Any Form; Logging; Fips Compliance; Password Control Configuration Task List - HPE FlexNetwork 10500 Series Security Configuration Manual

•
Disables the user account for a period of time.
The user can use the account to log in when either of the following conditions exists:
The locking timer expires.

The account is manually removed from the password control blacklist before the locking

timer expires.
NOTE:
This account is locked only for this user. Other users can still use this account, and the blacklisted
user can use other user accounts.
Maximum account idle time
You can set the maximum account idle time for user accounts. When an account is idle for this period
of time since the last successful login, the account becomes invalid.

Password not displayed in any form

For security purposes, nothing is displayed when a user enters a password.

Logging

The system logs all successful password changing events and user adding events to the password
control blacklist.

FIPS compliance

The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for
features, commands, and parameters might differ in FIPS mode (see
non-FIPS mode.

Password control configuration task list

The password control features can be configured in several different views, and different views
support different features. The settings configured in different views or for different objects have the
following application ranges:
•
Settings for super passwords apply only to super passwords.
•
Settings in local user view apply only to the password of the local user.
•
Settings in user group view apply to the passwords of the local users in the user group if you do
not configure password policies for these users in local user view.
•
Global settings in system view apply to the passwords of the local users in all user groups if you
do not configure password policies for these users in both local user view and user group view.
For local user passwords, the settings with a smaller application scope have higher priority.
To configure password control, perform the following tasks:
Tasks at a glance
(Required.)
(Optional.) Setting global password control parameters
(Optional.) Setting user group password control parameters
Enabling password control
268
"Configuring FIPS") and