Veritas NetBackup™ Appliance Security Guide
- About the NetBackup appliance Security Guide
- User authentication
- About user authentication on the NetBackup appliance
- About configuring user authentication
- About user name and password specifications
- User authorization
- Intrusion prevention and intrusion detection systems
- Log files
- Operating system security
- Data security
- Web security
- Network security
- Call Home security
- About AutoSupport
- About Call Home
- About SNMP
- Remote Management Module (RMM) I security
- STIG and FIPS conformance
- Appendix A. Security release content
About STIG-compliant password policy rules
To comply with the Security Technical Implementation Guides (STIGs), NetBackup appliances automatically enforce a higher security password policy when the STIG option is enabled.
After the STIG option is enabled, all current user passwords that were created under the default policy remain valid. Once you are ready to change any user passwords, the STIG-compliant policy rules must be followed.
The following describes the STIG-compliant password policy rules:
Minimum characters: 15
Minimum numbers: 1
Minimum lowercase characters: 1
Minimum uppercase characters: 1
Minimum special characters: 1
Maximum consecutive repeating characters: 2
Maximum consecutive repeating characters of the same class: 4
Minimum number of different characters: 8
Minimum days for password change: 1
Maximum days for password change: 60
Dictionary words are not valid or accepted.
The last seven passwords cannot be reused
Password policy that is displayed on the interface is not translated in other languages. The password policy is displayed in English on Japanese and Chinese interfaces.
When the STIG option is enabled, it enforces a login lockout for any user that enters three consecutive incorrect passwords within 15 minutes. The lockout condition is in effect for seven days. To clear a lockout condition, contact Technical Support for assistance.
Starting with appliance release 3.1.2, the STIG password age policy delays maintenance account password changes in the following scenarios:
For 24 hours, after you enable the STIG option.
For 24 hours, after you upgrade a STIG-enabled appliance to 3.1.2 or later.
Any attempt to change the maintenance account password within 24 hours of either of these events results in failure. Make sure that you wait at least 24 hours after these events before you change the maintenance account password.