G06.31 Release Version Update Compendium

Manageability Products
G06.31 Release Version Update Compendium—544625-001
6-3
Password Quality Enhancements
Password Quality Enhancements
The versions of Standard Security and Safeguard released with the G06.31 RVU
provide these password enhancements:
•
Support for new password quality attributes
•
Support for embedded spaces in user or alias passwords
The following new password quality attributes are introduced:
In addition, the following attributes are introduced:
The password quality attributes are disabled by default; they must be explicitly enabled
through Safeguard (if Safeguard is running) or by using the PWCONFIG command.
The password quality attributes can be modified only if the PASSWORD-ENCRYPT
attribute is set to ON and the PASSWORD-ALGORITHM attribute is set to HMAC256.
In addition, for PASSWORD-SPACES-ALLOWED to be altered, PASSWORD-
COMPATIBILITY-MODE must be set to OFF.
Migration
There are no special considerations for migrating to the G06.31 RVU. However, a
mitigation procedure is available for handling any unexpected failures that might occur
during migration. This procedure preserves the user or password database that is
necessary to restore the original system user or alias database.
Once the new version is installed, use the new PWCONFIG utility to modify the
appropriate attributes if you do not want to accept the new default values.
Attribute Description
PASSWORD-UPPERCASE-
REQUIRED
When set to ON, passwords must contain at least one
uppercase character.
PASSWORD-LOWERCASE-
REQUIRED
When set to ON, passwords must contain at least one
lowercase character.
PASSWORD-NUMERIC-
REQUIRED
When set to ON, passwords must contain at least one
numeric character.
PASSWORD-SPECIALCHAR-
REQUIRED
When set to ON, passwords must contain at least one
special character (any nonalphanumeric character except
for commas, double quotes, or semicolons).
Attribute Description
PASSWORD-MIN-QUALITY-
REQUIRED
Specifies the minimum number of quality criteria that must
be met when a password is set or changed. Valid values
are 0 through 4.
PASSWORD-SPACES-
ALLOWED
When set to ON, passwords may optionally contain
embedded spaces.