Creating Hard-To-Crack Passwords; Changing Passwords Or Pins; Changing Passwords - Netscape ENTREPRISE SERVER 6.1 - 08-2002 ADMINISTRATOR Administrator's Manual

Considering Additional Security Issues
A good password is one you'll remember but others won't guess. For example, you
could remember MCi12!mo as "My Child is 12 months old!" A bad password is
your child's name or birthdate.

Creating Hard-to-Crack Passwords

There are some simple guidelines that will help you create a stronger password.
It is not necessary to incorporate all of the following rules in one password, but the
more of the rules you use, the better your chances of making your password hard
to crack:
• Passwords should be 6-14 characters long.
• Do not use the "illegal" characters: *, ", or spaces
• Do not use dictionary words (any language)
• Do not make common letter substitutions, like replacing E with 3, or L with 1
• Include characters from as many of these classes as possible:

Changing Passwords or PINs

It's a good practice to change your trust database/key pair file password or PIN
periodically. If your Administration Server is SSL enabled, this password is
required when starting the server. Changing your password periodically adds an
extra level of server protection.
You should only change this password on your local machine. For a list of
guidelines to consider when changing a password, see "Creating Hard-to-Crack
Passwords," on page 132.

Changing Passwords

To change your trust database/key-pair file password for the Administration
Server or an server instance, perform the following steps:
132 Netscape Enterprise Server Administrator's Guide • August 2002
Uppercase letters
Lowercase letters
Numbers
Symbols