Password Settings

The Password Settings page enables you to specify requirements for passwords for Web users, to provide increased security for Transform Content Center documents.

To specify password settings:

On the Users tab, click Password Settings.
Select Enable password security settings.

Change or enter the settings as required:

Use strong passwords

Select this to require passwords to comply with industry standard strong password composition policies. When this is selected, passwords must include at least three of the following types of character:

Upper case letters
Lower case letters
Numbers
Characters that are not alphanumeric

Passwords expire (days)

The number of days a user can have the same password before being required to set a new one.

Set a value between 0 and 255, where 0 means that passwords never expire.

Password minimum length

The minimum number of characters that passwords must contain.

Set a value between 0 and 15, where 0 means that there is no minimum length.

Notice of password expiry (days)

The number of days' warning users receive before their password expires.

Expiry warnings are displayed when the user signs in.

Set a value between 0 and 14, where 0 means that no warning is displayed.

Number of excluded previous passwords

The number of previously used passwords to disallow from re-use.

Set a value between 0 and 15, where 0 means that new passwords are not checked against previously used ones.

Maximum number of failed sign in attempts

The number of unsuccessful sign-in attempts to allow before disabling the user's account.

Set a value between 0 and 15, where 0 means that the account is not disabled as a result of unsuccessful sign-in attempts.

Note

This setting applies to both Web and Windows users.

Click Save.

Notes

When you first enable password security settings, all existing passwords expire, and users must set new passwords when they next sign in.
When you create a new user, the password settings are ignored. On signing in for the first time, the new user must set a new password that complies with the password settings.
When a user exceeds the maximum allowable number of failed sign-in attempts, you can reenable the account on the Profiles page. If the user is a Web user, you must also set a new password, which expires after first use.