HP 6125G HP 6125G & 6125G/XG Blade Switches Security Configuration Gui - Page 149

Depending on the system security requirements, you can set the minimum number of categories a password must contain and the minimum number of characters of each category. There are four password combination levels: 1, 2, 3, and 4, each representing the number of categories that a password must at least contain. Level 1 means that a password must contain characters of one category, level 2 at least two categories, and so on. When a user sets or changes the password, the system checks if the password satisfies the composition requirement. If not, the system displays an error message. • Password complexity checking A less complicated password such as a password containing the username or repeated characters is more likely to be cracked. For higher security, you can configure a password complexity checking policy to make sure that all user passwords are relatively complicated. With such a policy configured, when a user configures a password, the system checks the complexity of the password. If the password is not qualified, the system refuses the password and displays a password configuration failure message. You can impose the following password complexity requirements: { A password cannot contain the username or the reverse of the username. For example, if the username is abc, a password such as abc982 or 2cba is unqualified. { No character of the password is repeated three or more times consecutively. For example, password a111 is not qualified. • Password display in the form of a string of asterisks (*) For the sake of security, the password a user enters is displayed in the form of a string of asterisks (*). • Authentication timeout management The authentication period is from when the server obtains the username to when the server finishes authenticating the user's password. If a Telnet user fails to log in within the configured period of time, the system tears down the connection. • Maximum account idle time You can set the maximum account idle time to make accounts staying idle for this period of time become invalid and unable to log in again. For example, if you set the maximum account idle time to 60 days and user using the account test has never logged in successfully within 60 days after the last successful login, the account becomes invalid. • Logging The system logs all successful password changing events and the events of adding users to the password control blacklist. Password control configuration task list The password control functions can be configured in several views, and different views support different functions. The settings configured in different views or for different objects have different application ranges and different priorities: • Global settings in system view apply to all local user passwords and super passwords. • Settings in user group view apply to the passwords of all local users in the user group. • Settings in local user view apply to only the password of the local user. • Settings for super passwords apply to only super passwords. The above four types of settings have different priorities: 139