Veritas NetBackup™ Appliance Security Guide
- About the NetBackup appliance Security Guide
- User authentication
- About user authentication on the NetBackup appliance
- About configuring user authentication
- About authenticating LDAP users
- About authenticating Active Directory users
- About authentication using smart cards and digital certificates
- About single sign-on (SSO) authentication and authorization
- About the appliance login banner
- About user name and password specifications
- User authorization
- Intrusion prevention and intrusion detection systems
- About Symantec Data Center Security on the NetBackup appliance
- About the NetBackup appliance intrusion prevention system
- About the NetBackup appliance intrusion detection system
- Reviewing SDCS events on the NetBackup appliance
- Running SDCS in unmanaged mode on the NetBackup appliance
- Running SDCS in managed mode on the NetBackup appliance
- Log files
- Operating system security
- Data security
- Web security
- Network security
- Call Home security
- Remote Management Module (RMM) security
- STIG and FIPS conformance
- Index
About STIG-compliant password policy rules
To comply with the Security Technical Implementation Guides (STIGs), NetBackup appliances automatically enforce a higher security password policy when the STIG option is enabled.
After the STIG option is enabled, all current user passwords that were created under the default policy remain valid. Once you are ready to change any user passwords, the STIG-compliant policy rules must be followed.
The following describes the STIG-compliant password policy rules:
Minimum characters: 15
Minimum numbers: 1
Minimum lowercase characters: 1
Minimum uppercase characters: 1
Minimum special characters: 1
Maximum consecutive repeating characters: 2
Maximum consecutive repeating characters of the same class: 4
Minimum number of different characters: 8
Minimum days for password change: 1
Maximum days for password change: 60
Dictionary words are not valid or accepted.
The last seven passwords cannot be reused
Note:
Password policy that is displayed on the interface is not translated in other languages. The password policy is displayed in English on Japanese and Chinese interfaces.
Starting with appliance release 5.1.1, when the STIG option is enabled, the login lockout is permanent for any user that enters three consecutive incorrect passwords within 15 minutes. An administrator is required to manually unlock any locked accounts by using the Settings > Security > Authentication > AccountStatus > UnlockAccounts command.
Starting with appliance release 3.1.2, the STIG password age policy delays maintenance account password changes in the following scenarios:
For 24 hours, after you enable the STIG option.
For 24 hours, after you upgrade a STIG-enabled appliance to 3.1.2 or later.
Any attempt to change the maintenance account password within 24 hours of either of these events results in failure. Make sure that you wait at least 24 hours after these events before you change the maintenance account password.