Smart Console user password complexity

[Ihenock1011]

Hi Teams,

We want to configure password complexity for Smart Console administrators. However, I couldn't find Smart Console user password complexity policies. Within Global Properties > User Directory. Is that policy setting intended for Smart Console users, or is it for a different user directory service?

Thanks

[Vincent_Bacher]

Hi

No, this is not a setting for SmartConsole administrators.

As far as I know, there is unfortunately no setting option for password complexity for SmartCOnsole administrators if they are authenticated locally.

But if you need this, you have to use external authentication and define the complexity there, possibly including MFA

cheery

[Bob_Zimmerman]

It's perhaps worth noting that password complexity requirements have been universally considered counterproductive for quite some time. Even NIST finally updated their guidance to recommend against them in SP 800-63B in 2017-06 (see section 5.1.1.2: "Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets.").

SmartConsole administrators shouldn't be using local authentication if central is possible. Password complexity requirements can be implemented with most central authentication systems, but you should think before reducing the security of your environment like that.

[Vincent_Bacher]

Yes, of course. External authentication should always be the preferred method. We also switched our SmartConsole authentication to ISE some time ago.

[Lesley]

If you want to only use local authentication the only thing you can force is a password change upon login and a minimal length. 

Smart Console -> Manage & Settings -> Permissions & administrators -> Advanced -> Minimum password length and further below there are login restrictions.
Force a password change is Smart Console -> Manage & Settings -> Permissions & administrators -> Administrators -> under relevant user

[the_rock]

Hey bro,

I dont believe that was ever possible for Smart console admins. You can set it for Gaia users on OS level though.

Best,

Andy