Setting up the user account security policies

System Administrator Guide for VSP One Block 85
Version
A0-05-4x
Audience
anonymous
Part Number
MK-26VSP1B030-03
ft:lastEdition
2026-06-22

Use the following procedure to configure the user account security policies, which include password requirements and login restrictions for all users on this storage system.

After the password policies have been set up, the policies are applied to new users created after the policies were set up. For existing users, the password policies are applied the next time their passwords are changed. If an old password (set before the password policies were applied) does not comply with the new password policies (for example, too few characters), the user can use the old password until the password is changed.

CAUTION:
  • Users will not be able to log in after their passwords expire.
  • To keep the password from expiring, the user needs to change the password by 23:59 on the day the password expires. If the password expires, the security administrator needs to enable the user account and reset the password.
  • If there is only one user with the the Security Administrator (View & Modify) role and the password of that user expires, the user can continue to log in.
  • If there are multiple users the Security Administrator (View & Modify) role and their passwords expire at the same time, they can continue to log in.
  • If a user with the Security Administrator (View & Modify) role is in the period during which password change is prohibited, the user can still change other users' passwords.
  • The restrictions on the characters in a password differ depending on the management tool. If you use multiple management tools, set up password policies so that the password is valid in all of the management tools.
  • You can set different number of days for the password validity period for user account policies and individual user accounts. If you change the number of days for the password validity period set for user account policies, the number of days you changed (increased or decreased) is applied to the number of days for the password validity period for individual user accounts.

    For example, when the password validity period for a user account is 50 days (200 days have passed since it was set to 250 days), if the password validity period is changed from 350 days to 250 days (100 days shorter), the password validity period for the user account will also be shortened by 100 days. In this case, it is considered that the password expired 50 days ago. Therefore, this user account will be disabled at 00:00 on the next day the number of days for the password validity period is changed.

    To avoid this problem, when you set the number of days for the password validity period for user account policies, set the same number of days for the password validity period for individual user accounts.

  • You must have the Security Administrator (View & Modify) role to perform this task.
  1. Log in to the maintenance utility.
  2. Select Administration > User Account Policies.
  3. In the User Account Policies panel, click Modify.
  4. In the Modify User Account Policies dialog box, select the Policy tab.
  5. Specify the password policy and account lockout settings.
    At initial setup, the default values are displayed. These default values might be different from the default values for previous software versions in which the user account security policies were not supported.
    Option Description
    Numeric Characters (0-9) Minimum number of numeric characters (0 to 9):
    • 0-256: Minimum number of numeric characters that must be included in a user password.
    • Default: 0
    Uppercase Characters (A-Z) Minimum number of uppercase characters (A to Z):
    • 0-256: Minimum number of uppercase characters that must be included in a user password.
    • Default: 0
    Lowercase Characters (a-z) Minimum number of lowercase characters (a to z):
    • 0-256: Minimum number of lowercase characters that must be included in a user password.
    • Default: 0
    Symbols Minimum number of symbol characters:
    • 0-256: Minimum number of symbol characters that must be included in a user password.
    • Default: 0
    Total Characters Minimum number of characters:
    • 6-256: Minimum number of characters that must be included in a user password.
    • Default: 8
    Limit Available Keywords Prohibit including one's user name in the password:
    • Yes: Including one's user name is prohibited.
    • No (default): Including one's user name is not prohibited.
    Number of Previous Passwords that Cannot be Reused Number of previous passwords that cannot be reused in the password history. If 1 is set, only the password used immediately before the password change cannot be reused:
    • 1-10: Number of passwords that cannot be reused in the password history.
    • Default: 0
    Require Password Change on First login Request password change at first login:
    • Yes (default): Password change is requested at first login.
    • No: Password change is not requested at first login.
    Password Change Prohibition Period (days) Period (days) during which password change is prohibited:
    • 0-10: The number of days during which password change is prohibited.
    • Default: 0
    Password Validity Period (days) Number of days during which the password is valid. Specify a period longer than the Password Change Prohibition Period.
    • 1-365: Number of days during which the password is valid.
    • Blank: The password remains valid and does not expire.
    • Default: 42
    Lockout Mode Behavior when the number of login failures exceeds the specified value:
    • Lock Account (default): The account is locked.
    • Disable Account: The account is disabled.
    Allowed Login Attempts Maximum number of allowed login attempts:
    • 1-999: Number of allowed login attempts.
    • Blank: Login attempts are allowed indefinitely.
    • Default: 3
    Lockout Period (seconds) Period during which the account is locked:
    • 60-345600: The period (seconds) during which the account is locked.
    • Default: 60
  6. Confirm the settings, and then click Apply.
  7. When the completion message appears, click OK.