Contents

1   Description

This instruction describes how to change the password quality settings applicable for local Operation and Maintenance (O&M) user accounts.

2   Procedure

2.1   Change Password Quality Configuration

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user has sufficient access rights to perform the task, for example, the user has System Security Administrator role.
  • The user is familiar with the security policy of the organization.
  • An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

Steps

1. Navigate to the PasswordQuality Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,PasswordQuality=1

2. Enter Config mode:

   (PasswordQuality=1)>configure

3. Set the PasswordQuality attributes according to the operator password policy, for example:

   (config-PasswordQuality=1)>no maxConsecutivePerClass

   (config-PasswordQuality=1)>minDigit=1

   (config-PasswordQuality=1)>minLower=1

   (config-PasswordQuality=1)>minUpper=1

   In this example, the password must contain at least one digit, at least one lower case character, and at least one upper case character; consecutive character classes are not checked.

4. Commit the settings:

   (config-PasswordQuality=1)>commit

5. Verify the configured attributes:

   (PasswordQuality=1)>show -v

   The following is an example output:

   PasswordQuality=1 maxConsecutivePerClass=[] <empty> minDigit=1 minLower=1 minOther=[] <empty> minPoints=3 <default> minUpper=1 passwordQualityId="1" reservedBy <read-only> "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ AdministratorAccount=la-admin" "ManagedElement=1,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ PasswordPolicy=2"