Security Management Guide (G06.29+, H06.08+, J06.03+)

Concerns for the System Administration Team
Security Management Guide — 522283-021
6 - 9
Password Reuse

PASSWORD-MIN-QUALITY-REQUIRED - When set to a value between 0 to 5, it
specifies the minimum number of quality criteria that have to be met when a
password is set or changed.

PASSWORD-MIN-UPPERCASE-REQ - When set to a value between 0 to 8, it
specifies the minimum number of uppercase characters required in a user
password when it is set or changed.

PASSWORD-MIN-LOWERCASE-REQ - When set to a value between 0 to 8, it
specifies the minimum number of lowercase characters required in a user
password when it is set or changed.

PASSWORD-MIN-NUMERIC-REQ - When set to a value between 0 to 8, it
specifies the minimum number of numeric characters required in a user password
when it is set or changed.

PASSWORD-MIN-SPECIALCHAR-REQ - When set to a value between 0 to 8, it
specifies the minimum number of special characters required in a user password
when it is set or changed.

PASSWORD-ALPHA-REQUIRED - When set to ON, specifies whether the user
password will be enforced to have at least one alphabetical character.

PASSWORD-MIN-ALPHA-REQ - When set to a value between 0 to 8, it specifies
the minimum number of alphabetical characters required in a user password when
it is set or changed.
Password Reuse
A Safeguard configuration attribute can be used to limit the reuse of passwords by all
users. For example:
3> SAFECOM ALTER SAFEGUARD, PASSWORD-HISTORY 12
Note. The Quality password and embedded spaces are supported only on systems running
G06.31 and later G-series RVUs and H06.09 and later H-series RVUs.
Note.

The PASSWORD-MIN-UPPERCASE-REQ, PASSWORD-MIN-LOWERCASE-REQ,
PASSWORD-MIN-NUMERIC-REQ, PASSWORD-MIN-SPECIALCHAR-REQ,
PASSWORD-ALPHA-REQUIRED,and PASSWORD-MIN-ALPHA-REQ attributes are
supported only on systems running J06.11 and later J-series and H06.22 and later H-
series RVUs.

While setting PASSWORD-MIN-QUALITY-REQUIRED to a value greater than 0, ensure
that the sum of the values of the effective password quality attributes (PASSWORD-MIN-
UPPERCASE-REQ, PASSWORD-MIN-LOWERCASE-REQ, PASSWORD-MIN-
NUMERIC-REQ, PASSWORD-MIN-SPECIALCHAR-REQ or PASSWORD-MIN-ALPHA-
REQ) must not be greater than the value of the PASSWORD-MAXIMUM-LEN attribute
.