Providing advanced notice of a required password change on the CLI

You can provide advanced warning that a user's password will expire (from 2 through 999 days), allowing the user time to change the password before he or she is locked out of the system.

For a managed appliance, you can perform this procedure on the Central Management System appliance as well as the local appliance. The procedure remains the same. However, you will need to take the additional step to locate the appliance on the Central Management System CLI. For instructions on locating an appliance on the Central Management System CLI, see the Trellix Central Management System Administration Guide.

Prerequisites

Admin access

To configure the advance notice about a pending password change:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

To specify the number of days of advance notice, use the following command:
```
aaa authentication password local require-change advance-warning <days>
```
where <days> is a values from 1 through 999.
Note
When you specify 1, the unit of measurement is minutes, not days. This allows you to test your configuration without waiting a full day to see the results.

Verify your change:

hostname (config) # show aaa authentication password

Save your changes:
```
hostname (config) # write memory
```
Note
To remove a configuration, append no to the command. For example, to remove the requirement for all users to change their passwords the next time they log in, use the no aaa authentication password local require-change force all command.