aaa authentication password local require-change advance-warning

Use this command to set an advance warning to users when their passwords are about to expire.

You can configure when the system should start warning users that their passwords will expire. The warnings are displayed on the Dashboard in the Web UI and in the CLI after the user logs in.

If the password is not changed and expires, the account will not be locked. However, users cannot do anything until they change their passwords.

Important

Password change policies only apply to users who authenticate locally. They are not enforced if a user authenticates remotely and is then mapped to a local user account that requires a password change, or if a user authenticates using an SSH authorized key.

Caution

The connection between the Central Management System appliance and its managed appliances requires "admin" credentials. The Central Management System Web services API uses "admin" credentials to authenticate requests. There are ramifications in both scenarios when the "admin" password changes. For details, see the Central Management System Administration Guide and the Central Management System Web Services API Guide.

Note

For more information about password change policies, see your System Administration Guide or Administration Guide.

Syntax

[no] aaa authentication password local require-change advance-warning <days>

Parameters

Removes the advanced warning notification.

The number of days in advance of the password expiration to start providing notification to the users.

Example

This example warns users 15 days before their passwords expire

hostname (config) # aaa authentication password local require-change advance-warning 15

User role

Admin

Supported appliances

This command is supported on the following appliances running the specified releases or later: