Breadcrumbs

Configuring password policy

Password Policy is created to define a format in which the new passwords will be generated by the vault. This is to ensure a configured level of password complexity by enforcing parameters such as minimum length, minimum uppercase, lowercase and numeric characters.

Password policy is like a prerequisite for Rotation policy. Once, a Password policy is created it should be assigned to the desired Rotation Policy which in turn is linked to the asset(s). The system provides a default password policy which is applied in absence of any other password policy. This section provides details for adding a new policy or updating the default policy/existing policy.

Configuring a new password policy

  • Login as an admin user.

  • Navigate to Policies → Click on Password Policy from the  Password Management section.

  • Click on +Add Password Policy.

  • Policy name: Enter the desired policy name like Windows servers password policy.

  • Description: Enter the desired description for this policy.

  • Use Static password (optional and not recommended): This option is only applicable if you choose to use the same password for all the privilege accounts configured with a rotation job associated with this password policy.

  • Parameters: Refer below table:

  • Exclude Char: Enter one or more characters to exclude from the password policy.

  • Ensure First Char: Tick the Any checkbox to have any character as first character of the password. To provide any other specification untick the Any checkbox and select required configuration from the drop-down list.

  • Ensure Last Char: Tick the Any checkbox to have any character as last character of the password. To provide any other specification untick the Any checkbox and select required configuration from the drop-down list.

  • Ensure Middle Char: Tick the Any checkbox to have any character as middle character of the password. To provide any other specification untick the Any checkbox and select required configuration from the drop-down list.

  • Test policy: Click on this button to view a sample password based on the defined parameters.

Password policy parameters

Parameters

Minimum

Maximum

Default

No. of Characters

2

50

8

Upper Case Chars

2

26

2

Lower Case Chars

2

26

2

Numeric case

2

10

2

Special Chars

2

7

2


You can disable any of the above parameter unchecking the Enforce checkbox.

Modifying existing password policy

  • Login as an admin user.

  • Navigate to Policies → Click on Password Policy from the Password Management section.

  • Click on policy name → Policy configuration will be opened.

  • Do the required changed like changes like no. of characters for password length, changing minimum required Upper Chars, etc.

  • Click on Update to save the changes.