HP XP P9000 Command View Advanced Edition Suite Software 7.5.0-00 Administrator Guide (Web Version) (TB581-96346, July 2013)

CAUTION:
• In all P9000 Command View AE Suite products, set password policies apply only to user accounts
that are added and passwords that are changed after the policy was set. New password policies
do not apply to existing user accounts, so users of such accounts can log in to the system even if
their passwords do not satisfy the set conditions.
• You can also set password policies from the GUI. However, if the system is in a cluster configuration,
the settings from the GUI are applied only to the executing node. To apply the settings to the
standby node, switch the nodes, and then specify the same settings.
• If an external authentication server is used to authenticate users, passwords are checked by using
a combination of character types specified on the external authentication server. However, if you
register a password for a P9000 Command View AE Suite product user, you need to use character
types specified in the P9000 Command View AE Suite products.
Related topics:
• About password policies, page 103
About account locking
Account locking is the locking (temporary disabling) of a user account.
By enabling account locking, you can reduce the risk of unauthorized access from third parties. If you
are managing user accounts by using a management server, we recommend that you enable account
locking.
In P9000 Command View AE Suite products, you can automatically lock user accounts that fail to
log in to the GUI many times in a row.
To enable account locking, you need to set the account locking policy (the number of consecutive,
unsuccessful login attempts before accounts are locked).
TIP:
As a way to lock an account, you can change the lock status of a user account from the GUI.
Note that only users with the Admin (user management) permission can change the lock status.
CAUTION:
• Account locking cannot be performed on System accounts when initially installing P9000 Com-
mand View AE Suite products. System accounts are set with Admin permissions for all P9000
Command View AE Suite products. If you want to set account locking for System accounts to
improve security, you need to change the settings.
• If an external authentication server is used to authenticate users, the settings on the external au-
thentication server are used to control automatic locking.
Administrator Guide (Web Version) 105