Use this command to set the maximum amount of time (in days) that a password can remain valid. At the end of this time, the password expires.
If the password is not changed and expires, the account will not be locked. However, users cannot do anything until they change their passwords.
Important
Password change policies only apply to users who authenticate locally. They are not enforced if a user authenticates remotely and is then mapped to a local user account that requires a password change, or if a user authenticates using an SSH authorized key.
Caution
The connection between the Central Management System appliance and its managed appliances requires "admin" credentials. The Central Management System Web services API uses "admin" credentials to authenticate requests. There are ramifications in both scenarios when the "admin" password changes. For details, see the Central Management System Administration Guide and the Central Management System Web Services API Guide.
Note
For more information about password change policies, see your System Administration Guide or Administration Guide.
Syntax
[no] aaa authentication password local require-change max-password-age <days>
Parameters
<term>no</term>
Removes the maximum password age setting.
<term>days</term>Specifies the number of days before a password must be changed. Range: 1–999 (in days)For testing, you can specify a decimal value as small as one minute (.0007).
Example
This example specifies that users change their passwords every 90 days.
hostname (config) # aaa authentication password local require-change max-password-age 90
This example removes the maximum password age setting.
no hostname (config) # aaa authentication password local require-change max-password-age
User role
Admin
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Release 7.7
Central Management System: Release 7.5
Email Security — Server: Release 7.6
File Protect: Release 7.5
Endpoint Security (HX): Release 3.0
Network Security: Release 7.5
Intelligent Virtual Execution - Server: Release 7.9