Forcing a password change on next log in using the CLI

There may be times when you need to force users to change their password immediately. You can specify whether to force everyone or a specific user to change his or her password on next log in.

For a managed appliance, you can perform this procedure on the Central Management System appliance as well as the local appliance. The procedure remains the same. However, you will need to take the additional step to locate the appliance on the Central Management System CLI. For instructions on locating an appliance on the Central Management System CLI, see the Trellix Central Management System Administration Guide.

Prerequisites

Admin access

To force a password change on the next login for all users:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Specify the change password on next log in for all users.

hostname (config) # aaa authentication password local require-change force all

Verify your change:

hostname (config) # show usernames password-status

Save your changes:
```
hostname (config) # write memory
```

To force a password change on the next login for one user:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

To specify the change password on next log in for the user, use the following command:
```
aaa authentication password local require-change force user <username>
```
To verify your change, use the following command:
```
show usernames username <username>
```
Save your changes:
```
hostname (config) # write memory
```