H06.09 Software Installation and Upgrade Guide

H06.09 Installation, Migration, and Fallback
Considerations
H06.09 Software Installation and Upgrade Guide—544316-002
2-22
Migration
The password quality attributes are disabled by default, and must be explicitly enabled
using the PWCONFIG command. The password quality attributes take effect only if the
PASSWORD-ENCRYPT attribute is set to ON and the PASSWORD-ALGORITHM
attribute is set to HMAC256. In addition, for PASSWORD-SPACES-ALLOWED to take
effect, PASSWORD-COMPATIBILITY-MODE must be set to OFF.
For more information on the password quality enhancements, see the Password
Quality Enhancements support note.
Migration
There are no migration considerations specific to the quality password feature.
However, a mitigation procedure is available for handling any unexpected failures that
might occur during migration. This procedure is described under Migration in a
Safeguard Environment on page 2-18.
Fallback
Embedded spaces in passwords are not supported in pre-H06.09 RVUs. Any user with
a password that contains embedded spaces will be unable to login after fallback.
Fallback considerations are:
•
Pre-H06.08 RVUs do not support the Safeguard longer password feature.
Therefore, when falling back to a pre-H06.08 RVU, users must first follow the steps
described under Fallback in a Safeguard Environment on page 2-18.
•
When falling back to H06.08 or earlier:
°
The super ID password must not contain embedded blanks.
°
PASSWORD-COMPATIBILITY-MODE must be set to ON.
Attribute Description
PASSWORD-UPPERCASE-
REQUIRED
When set to ON, passwords must contain at least one
uppercase character.
PASSWORD-LOWERCASE-
REQUIRED
When set to ON, passwords must contain at least one
lowercase character.
PASSWORD-NUMERIC-
REQUIRED
When set to ON, passwords must contain at least one
numeric character.
PASSWORD-SPECIALCHAR-
REQUIRED
When set to ON, passwords must contain at least one
special character (any nonalphanumeric character except
for commas, double quotes, or semicolons).
PASSWORD-SPACES-
ALLOWED
When set to ON, passwords may optionally contain
embedded spaces.
PASSWORD-MIN-QUALITY-
REQUIRED
Specifies the minimum number of quality criteria that must
be met when a password is set or changed. Valid values are
0 through 4.