CLI Guide

Password Policies
The management server uses a Pluggable Authentication Module (PAM) infrastructure to enforce minimum password quality.
For more information about technology used for password protection, see the Security Configuration Guide for the metro node
appliance.
Note the following:
● Password policies do not apply to users configured using the LDAP server.
● The Password inactive days policy does not apply to the admin account to protect the admin user from account lockouts.
● During the metro node software upgrade, an existing user’s password is not changed. Only the user’s password age
information changes.
● You must be an admin user to configure a password policy.
The following table lists and describes the password policies and the default values.
Table 2. Default password policies
Policy name Description Default value
Minimum password length The minimum number of characters used
when creating or changing a password.
The minimum number of characters
includes numbers, upper-case and lower-
case letters, and special characters.
8
Minimum password age The minimum number of days a
password can be changed after the last
password change.
1 (0 for service account)
Maximum password age The maximum number of days that a
password can be used since the last
password change. After the maximum
number of days, the account is locked
and the user must contact the admin
user to reset the password.
90 (3650 days for service account)
Password expiry warning The number of days before the
password expires. A warning message
indicating that the password must be
changed is displayed.
15 (30 days for service password)
Password inactive days The number of days after a password
has expired before the account is locked.
1
The password policy for existing admin, service, and customer-created user accounts is updated automatically as part of the
upgrade to this release. See the Security Configuration Guide for the metro node appliance for information about account
passwords.
Valid Password Characters
The following characters are allowed in a VPlexcli password:
● A-Z
● a - z
● 0 - 9
● . ? / * @ ^ % # + = - _ ~ : space
NOTE: A space is allowed only between the characters in a password, not in the beginning or the end of the password.
NOTE: A password can not begin with a pound sign (#).
Using the VPlexcli 13