Local Password

This topic applies to both Software Logger and the Logger Appliance.

The Local Password tab enables you to set password policies, such as the minimum and maximum number of characters and other password requirements.

Tip: For better security, if the configured authentication method is "Local Password", ensure that the Account Lockout policy is enabled.

To change the password settings:

  1. Click System Admin from the top-level menu bar.
  2. Click Authentication in the Users/Groups section.
  3. Choose the Local Password tab.

    Use the parameters described in the following table to customize your password settings.

    Parameter

    Description

    Lockout Account

    Enable Account Lockout

    Select the checkbox to enable user accounts to be locked out as defined by the following settings. By default, the policy is disabled.

    Note: You should enable this if you will be using the "Local Password" authentication method.

    Lockout Account After

    Number of failed login attempts after which a user account is locked out. The default is 3.

    Remember Failed Attempts For

    The length of time, in minutes, for which a failed login attempt is remembered. The default is 1.

    Lockout Account For

    The length of time, in minutes, for which a locked out account cannot be unlocked. The default is 15.

    Password Expiration

    Enable Password Expiration

    Select the checkbox to enable user passwords to expire as defined by the following settings. By default, the policy is disabled.

    Password Expires in

    Number of days after which the password expires. The default is 90.

    Notify User

    Number of days before expiration to notify the user. Select this option to allow users to update their password before expiration. The default is 5.

    Users Exempted From Password Expiration Policy

    Click the link to set the users whose password should never expire.

    For information on how to use this feature, see Users Exempted From Password Expiration.

    Password Strength Rules

    Enforce Password Strength

    Select the checkbox to enforce password policy as defined by the following settings. By default, the policy is disabled.

    Minimum Length

    Minimum number of characters that a password must contain. The default is 10.

    Maximum Length

    Maximum number of characters that a password can contain. The default is 20.

    Password Character Rules

    Password character rules define additional character requirements to ensure password strength.

    Numeric

    Minimum number of numeric characters (0-9) in a password. The default is 2.

    Uppercase

    Minimum number of uppercase characters (A-Z) in a password. The default is 0.

    Special

    Minimum number of non-digit and non-letter characters that are required in a password. The default is 2.

    Lowercase

    Minimum number of lowercase characters (a-z) in a password. The default is 0.

    Password Must be At Least N Characters Different From Old Password

    Minimum number of characters by which the new password must differ by from the previous one. The default is 2.

    Include “Forgot Password” link on Login Screen

    • Select the checkbox to enable users to reset their local password using a “Forgot Password” link on the login page. By default, the option is disabled.
    • An SMTP server must be configured on the system, and the username must have a correct email address for this feature to work successfully.
    • If an SMTP server is not set, you will not be able to reset the password because the email containing the temporary password cannot be sent.
    • An email address must be specified in the user settings for the user name. The temporary password is sent to that email address. If no email address is specified or if the email address is incorrect, the user will not receive the email.

    For information on how to use this feature, see Enabling Forgot Password.

  4. Click Save to save the changes, or click another tab to cancel.

Concept Link IconSee Also