G06.31 Release Version Update Compendium

Manageability Products
G06.31 Release Version Update Compendium—544625-001
6-2
Maximum Password Length Increased
When PASSWORD-COMPATIBILITY-MODE is OFF during password change, the full
password string (up to 64 characters) is effective and is considered for subsequent
user authentication.
PASSWORD-MAXIMUM-LENGTH
The other new password configuration attribute, PASSWORD-MAXIMUM-LENGTH,
specifies the maximum length allowed for the passwords being set or changed. This
attribute can be modified only when the PASSWORD-ENCRYPT attribute is set to ON
and the PASSWORD-ALGORITHM attribute is set to HMAC256. When
PASSWORD-ENCRYPT is set to ON and PASSWORD-ALGORITHM is set to
HMAC256, accepted values of PASSWORD-MAXIMUM-LENGTH are between 8 and
64 inclusive. The default value is 8.
There are special considerations. PASSWORD-MAXIMUM-LENGTH is reset to 8 when
PASSWORD-MAXIMUM-LENGTH is greater than 8 and one of these situations is true:
•
PASSWORD-ENCRYPT is changed from ON to OFF.
•
PASSWORD-ALGORITHM is changed from HMAC256 to DES.
PASSWORD-MINIMUM-LENGTH
The maximum value of PASSWORD-MINIMUM-LENGTH is increased from eight to 64
characters.
When either PASSWORD-ENCRYPT is set to OFF or PASSWORD-ENCRYPT is set to
ON and PASSWORD-ALGORITHM is set to DES, PASSWORD-MINIMUM-LENGTH
must have a value between 0 and 8 inclusive. When PASSWORD-ENCRYPT is set to
ON and PASSWORD-ALGORITHM is set to HMAC256, then PASSWORD-MINIMUM-
LENGTH can have a value between 0 and 64 inclusive, or between 0 and
PASSWORD-MAXIMUM-LENGTH inclusive, whichever is smaller.
There are special considerations. PASSWORD-MINIMUM-LENGTH is reset to 6 when
PASSWORD-MINIMUM-LENGTH is greater than 8 and one of these situations is true:
•
PASSWORD-ENCRYPT is changed from ON to OFF.
•
PASSWORD-ALGORITHM is changed from HMAC256 to DES.
Enabling the Longer Password Feature
By default, the longer password feature is disabled. After migrating to the G06.31 RVU,
the following Safeguard configuration attributes must be changed using SAFECOM (if
Safeguard is running) or PWCONFIG (if Safeguard is not running):
1. Change PASSWORD-COMPATIBILITY-MODE to OFF.
2. Change PASSWORD-MAXIMUM-LENGTH to a value greater than 8 characters.