To configure the minimum user account password strength requirements for this appliance or sensor, use the aaa authentication password local commands in CLI configuration mode. To restore the default settings for any password strength rule, type no in the CLI command line, followed by the configuration command.
For a managed appliance, you can perform this procedure on the Central Management System appliance as well as the local appliance. The procedure remains the same. However, you will need to take the additional step to locate the appliance on the Central Management System CLI. For instructions on locating an appliance on the Central Management System CLI, see the Trellix Central Management System Administration Guide.
For example, the following command removes the configured restriction on the number of characters than can be repeated consecutively in a password:
no aaa authentication password local max-chars-repeats
The following command removes configured requirement for the minimum number of upper-case characters in a password:
no aaa authentication password local character-type upper-case minimum
Note
The password validation features described in this procedure are disabled by default.
Password strength commands
The following commands are available to configure user password strength. For more information on individual commands, see the CLI Guide.
Minimum Number of Characters
aaa authentication password local length minimum <number>Maximum Number of Characters
aaa authentication password local length maximum <number>Maximum Number of Repeat Characters
aaa authentication password local max-char-repeats <number>Minimum Number of Lower-Case Characters
aaa authentication password local character-type lower-case minimum <number>Minimum Number of Upper-Case Characters
aaa authentication password local character-type upper-case minimum <number>Minimum Number of Numeric Characters
aaa authentication password local character-type numeral minimum <number>Minimum Number of Special Characters
aaa authentication password local character-type special minimum <number>Minimum Number of New Passwords Before Repeating a Password
aaa authentication password local history compare <number>
Admin access
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Enter the password strength command.
The table above lists the available commands. For full information about each command, see the CLI Command Reference.
Verify your changes:
hostname (config) # show aaa authentication passwordSave your changes:
hostname (config) # write memory