HP XP7 Command View Advanced Edition Administrator Guide (Web Version) (TK981-96004, May 2014)

CAUTION:
• In all HP XP7 Command View Advanced Edition products, set password policies apply only to
user accounts that are added and passwords that are changed after the policy was set. New
password policies do not apply to existing user accounts, so users of such accounts can log in to
the system even if their passwords do not satisfy the set conditions.
• You can also set password policies from the GUI. However, if the system is in a cluster configuration,
the settings from the GUI are applied only to the executing node. To apply the settings to the
standby node, switch the nodes, and then specify the same settings.
• If an external authentication server is used to authenticate users, passwords are checked by using
a combination of character types specified on the external authentication server. However, if you
register a password for an HP XP7 Command View Advanced Edition product user, you need to
use character types specified in the HP XP7 Command View Advanced Edition products.
About account locking
Account locking is the locking (temporary disabling) of a user account.
By enabling account locking, you can reduce the risk of unauthorized access from third parties. If you
are managing user accounts by using a management server, HP recommends that you enable account
locking.
In HP XP7 Command View Advanced Edition products, you can automatically lock user accounts that
fail to log in to the GUI many times in a row.
To enable account locking, you need to set the account locking policy (the number of consecutive,
unsuccessful login attempts before accounts are locked).
TIP:
As a way to lock an account, you can change the lock status of a user account from the GUI.
Note that only users with the Admin (user management) permission can change the lock status.
CAUTION:
• Account locking cannot be performed on System accounts when initially installing HP XP7
Command View Advanced Edition products. System accounts are set with Admin permissions
for all HP XP7 Command View Advanced Edition products. If you want to set account locking for
System accounts to improve security, you need to change the settings.
• If an external authentication server is used to authenticate users, the settings on the external au-
thentication server are used to control automatic locking.
About account locking policies
An account locking policy is the number of consecutive, unsuccessful login attempts before automatically
locking (temporarily disabling) user accounts that fail to log in to the GUI many times in a row.
When you set an account locking policy, it is immediately applied to all HP XP7 Command View
Advanced Edition products that use Single Sign-On functionality. For example, if you set the number
Administrator Guide (Web Version) 97