HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide (Web Version)

CAUTION:
• In all P9000 Command View AE Suite products, set password policies apply only to user accounts
that are added and passwords that are changed after the policy was set. New password policies
do not apply to existing user accounts, so users of such accounts can log in to the system even if
their passwords do not satisfy the set conditions.
• You can also set password policies from the GUI. However, if the system is in a cluster configuration,
the settings from the GUI are applied only to the executing node. To apply the settings to the
standby node, switch the nodes, and then specify the same settings.
• If an external authentication server is used to authenticate users, passwords are checked by using
a combination of character types specified on the external authentication server. However, if you
register a password for a P9000 Command View AE Suite product user, you need to use character
types specified in the P9000 Command View AE Suite products.
About account locking
Account locking is the locking (temporary disabling) of a user account.
By enabling account locking, you can reduce the risk of unauthorized access from third parties. If you
are managing user accounts by using a management server, HP recommends that you enable account
locking.
In P9000 Command View AE Suite products, you can automatically lock user accounts that fail to
log in to the GUI many times in a row.
To enable account locking, you need to set the account locking policy (the number of consecutive,
unsuccessful login attempts before accounts are locked).
TIP:
As a way to lock an account, you can change the lock status of a user account from the GUI.
Note that only users with the Admin (user management) permission can change the lock status.
CAUTION:
• Account locking cannot be performed on System accounts when initially installing P9000 Com-
mand View AE Suite products. System accounts are set with Admin permissions for all P9000
Command View AE Suite products. If you want to set account locking for System accounts to
improve security, you need to change the settings.
• If an external authentication server is used to authenticate users, the settings on the external au-
thentication server are used to control automatic locking.
About account locking policies
An account locking policy is the number of consecutive, unsuccessful login attempts before automatically
locking (temporarily disabling) user accounts that fail to log in to the GUI many times in a row.
When you set an account locking policy, it is immediately applied to all P9000 Command View AE
Suite products that use Single Sign-On functionality. For example, if you set the number of consecutive
Administrator Guide (Web Version) 107