You can require users other than the Admin role to enter their current passwords when they change their passwords. This requirement has the following additional impact:
The My Account Settings page in the Web UI includes a Current Password field.
Local login commands such as
username <userName> password <password>prompt for the current password if the user does not supply it as a command parameter.
Caution
Custom scripts that use the CLI to configure user accounts may need to be updated if the current password is required. For example, a script that sets the password for a user needs to be modified to accommodate the prompt for the current password.
Use the commands in this section to require users to enter their current password as well as their new password when they change passwords.
For a managed appliance, you can perform this procedure on the Central Management System appliance as well as the local appliance. The procedure remains the same. However, you will need to take the additional step to locate the appliance on the Central Management System CLI. For instructions on locating an appliance on the Central Management System CLI, see the Trellix Central Management System Administration Guide.
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Enable the current password feature:
hostname (config) # aaa authentication password local change require-current non-adminVerify that it is enabled:
hostname (config) # show aaa authentication passwordSave your changes:
hostname (config) # write memory
Note
To disable the feature, use the no aaa authentication password local change require-current command.