Specifications
69
User Console
This method is used by the user allowing them to securely modify their own password without any
intervention by the administrator.
Step 1 From the My Accounts section select Change Password.
Step 2 The user is now able to change their password from the Change Password page.
The user is expected to key in the original password as well before the change can occur.
By default the system will lock any user that fails authentication after three attempts and again disables
any user who has been locked out three times consecutively. These parameters are configurable and
are detailed in the section below.
Configuring Passwords
The configuration options can be accessed from Management Console > Advanced > Configuration
> Password Options. There are a considerable number of parameters that should be understood as the
Password authentication module is commonly used as the default authentication scheme and tends to
be found in most other multi-factored schemes. The configuration parameters are detailed below:
• Max Logon Attempts Before Lock: A value of zero disables this option; the default value is
3 logon attempts, if after 3 attempts the account is temporarily locked.
• Max Locks Attempts before Lock: A value of zero disables this option; the default is 3
temporary locks, after which the account is permanently locked.
• Lock Duration: The length of time an account is locked; default value is 300 seconds.
• Password Pattern: The definition of a password, how passwords should be constructed.
Details on Password patterns can be found below.
• Password Pattern Description: This description is shown to the user when defining a
personal password.
• Days before Expiry Warning: The default value is 21, after which the warning will be
displayed to the user informing them to change their password.
• Days before Expiry: The default is 28 days approximately one month after which the user
will be forced to change password.
Password Pattern
The structure of an account password is based on regular expressions and is defaulted to, .{5,},
which defines a password with a minimum size of 5 characters. This expression is detailed in the
diagram below: