Contents

1   Introduction

This document describes how to change the password quality settings applicable for local Operation and Maintenance (O&M) user accounts.

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has sufficient access rights to perform the task, for example, the user has System Security Administrator role.
• The user is familiar with the security policy of the organization.
• An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

2   Procedure

To change a password quality configuration:

1. Navigate to the PasswordQuality Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,PasswordQuality=1

2. Enter Config mode:

   (PasswordQuality=1)>configure

3. Set the PasswordQuality attributes according to the operator password policy, for example:

   (config-PasswordQuality=1)>no maxConsecutivePerClass

   (config-PasswordQuality=1)>minDigit=1

   (config-PasswordQuality=1)>minLower=1

   (config-PasswordQuality=1)>minUpper=1

   In this example, the password must contain at least one digit, at least one lower case character, and at least one upper case character; consecutive character classes are not checked.

4. Commit the settings:

   (config-PasswordQuality=1)>commit

5. Verify the configured attributes:

   (PasswordQuality=1)>show -v

   The following is an example output:

   PasswordQuality=1 maxConsecutivePerClass=[] <empty> minDigit=1 minLower=1 minOther=[] <empty> minPoints=3 <default> minUpper=1 passwordQualityId="1" reservedBy <read-only> "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ AdministratorAccount=la-admin" "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ PasswordPolicy=2"