TrueSight Server Automation (TSSA) - How to define the password policies in TSSA

Knowledge Article

Article Number

000417998

Old Article Number

Article Type

FAQ/Procedural

Title

TrueSight Server Automation (TSSA) - How to define the password policies in TSSA

Summary

Product

TrueSight Server Automation

Component

TrueSight RBAC and Security

Applies to

Version-Neutral

Question

Does TSSA incorporate guidelines governing the strength, expiration, and complexity of passwords for user accounts? Such rules are essential for safeguarding the security of accounts and sensitive information.

Answer

Yes, TSSA incorporates the guidelines on defining the password to meet the following requirements:

Minimum password length
Maximum password age
Account lockout Threshold
Account lockout Duration
Password complexity
Password history

Use blasadmin utility to configure the Application Server so it forces users to meet the above requirements. After modifying the blasadmin settings, please restart the Application Server to ensure that the changes take effect.

To specify	Enter
Minimum password length	`set accountconfig MinPasswordLength #` In this command # is the minimum length for passwords. Entering a 0 indicates there is no minimum length for passwords.
How long it takes for a password to expire	`set accountconfig MaxPasswordAge #` In this command, # is a period in days. Entering a 0 indicates that passwords do not expire. In RBAC user can specify that passwords never expire no matter what expiration period you specify.
The number of times a user can fail to log on before being locked out	`set accountconfig AccountLockoutThreshold #` In this command, # is the number of failed logons that trigger a lockout. Entering a 0 indicates that users cannot be locked out because of login failures.
How long a user is locked out when he or she has surpassed the lockout threshold	`set accountconfig AccountLockoutDuration #` In this command, # is the number of minutes the user is locked out. Entering a 0 indicates that an administrator can only unlock users using RBAC.
That user passwords meet complexity requirements	`set accountconfig IsPasswordComplexityEnabled true` By default, this value is set to false.
That user passwords do not match previous passwords	Enable checking of password history by entering the following command: `set accountconfig IsPasswordHistoryEnabled true` By default, this value is set to `false`. Specify how many passwords can be stored for comparison with the current password by entering the following command: `set accountconfig MaxPasswordHistory #` The maximum number of passwords that can be stored is 30. The minimum is 1. By default, this value is set to 5.

Attachment(s):