No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Administrator Guide 15

OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, and 6800 V3 Storage System V300R003

Routine maintenance activities are the most common activities for the storage device, including powering on or off the storage device, managing users, modifying basic parameters of the storage device, and managing hardware components. This document applies to the system administrators who are responsible for carrying out routine maintenance activities, monitoring the storage device, and rectifying common device faults.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring a Security Policy (Applicable to V300R003C00/V300R003C10)

Configuring a Security Policy (Applicable to V300R003C00/V300R003C10)

Security policies include the username policy, password policy, login policy and advanced settings.

Procedure

  1. Log in to DeviceManager.
  2. Choose Settings > Permission Settings > Security Policies.
  3. Configuring the username policy, password policy, login policy and advanced settings.

    Table 3-1, Table 3-2, Table 3-3 and Table 3-4 describe related parameters.



    Table 3-1  Username policy parameters

    Parameter

    Description

    Value

    Min. Length

    Minimum length of the username. A complex username is recommended.

    [Value range]

    Its value is an integer ranging from 5 to 32.

    [Default]

    6

    Table 3-2  Password policy parameters

    Parameter

    Description

    Value

    Min. Length

    Minimum length of the user password. A complex password is recommended.

    [Value range]

    Its value is an integer ranging from 8 to 32.

    [Default]

    8

    Max. Length

    Maximum length of the user password. This parameter prevents administrators from configuring lengthy passwords.

    [Value range]

    Its value is an integer ranging from 8 to 32.

    [Default]

    16

    Complexity

    Complexity of the user password. A complex password is recommended.

    [Value range]

    Must contain special characters and any two types of uppercase letters, lowercase letters and digits or Must contain special characters, uppercase letters, lowercase letters and digits

    [Default]

    Contains special characters and any two types of uppercase letters, lowercase letters and digits

    Number of Duplicate Characters

    Maximum number of consecutive duplicate characters.

    [Value range]

    Its value is Not limited or an integer ranging from 1 to 9.

    [Default]

    3

    Number of Retained Historical Passwords

    Number of retained historical passwords of the account. A new password must be different from retained historical passwords. If the value is 0, the number is not limited.

    [Value range]

    Its value is an integer ranging from 0 to 30.

    [Default]

    3

    Password Validity Period (days)

    Setting of the password's validity period. You are advised to enable Password Validity Period (days).

    After Password Validity Period (days) is enabled, you need to set the password validity period to a specific number of days. The system prompts you to change the password in a timely manner.

    NOTE:

    If this parameter is not selected, the password will never expire. To ensure storage system security, you are advised to select and set this parameter.

    [Value range]

    Its value is an integer ranging from 1 to 999.

    [Default]

    90

    Password Expiration Warning Period (days)

    Number of days prior to password expiration that the user receives a warning message.

    [Value range]

    Its value is an integer ranging from 1 to 99.

    [Default]

    7

    Password Change Interval (minutes)

    Minimum time required for password resetting.

    [Value range]

    Its value is an integer ranging from 1 to 9999.

    [Default]

    5

    Table 3-3  Login policy parameters

    Parameter

    Description

    Value

    Session Timeout Duration (minutes)

    Duration after which the system indicates timeout if a logged-in user performs no operations during the period. After you click OK in the event of timeout, the system returns to the login page.

    [Value range]

    Its value is an integer ranging from 1 to 100.

    [Default]

    30

    Password Lock

    Locking a user if the times of consecutively inputting incorrect passwords by the user exceed Number of Incorrect Passwords within 5 minutes.
    NOTICE:

    Security risks arise if you disable password lock. You are advised to enable password lock.

    [Default]

    Enabled

    Number of Incorrect Passwords

    Times allowed for consecutively entering incorrect passwords. When incorrect passwords are input exceeds the Number of Incorrect Passwords times, the user is automatically locked.

    NOTE:
    • This parameter is available only when Password Lock is enabled.
    • After the user is locked, the super administrator can manually unlock the user. If the Lock Mode is Temporary, after the duration is reached, the user is automatically unlocked.

    [Value range]

    Its value is an integer ranging from 1 to 9.

    [Default]

    3

    Lock Mode

    Mode of automatically locking a user.
    • If you select Permanent, the administrator or read-only user will be permanently locked, the super administrator will be automatically unlocked after being locked for 15 minutes.
    • If you select Temporary, you can set the duration of locking the administrator or read-only user.

    [Default]

    Temporary

    Automatic Unlock in (minutes)

    Duration of user locking. After the lock duration expires, the locked user is automatically unlocked.
    • This parameter is available only when Password Lock is enabled and Lock Mode is Temporary.
    • This parameter is available to automatic lock only. This parameter is unavailable if the user is manually locked. A manually locked user can be manually unlocked only.
    • This parameter is available to the administrator or read-only user only. The super administrator will be automatically unlocked after being locked for 15 minutes whether you choose Permanent or Temporary.

    [Value range]

    Its value is an integer ranging from 3 to 2000.

    [Default]

    15

    Account Lock

    A system account will be locked if it is not used for login and the idle period exceeds the specified days.

    [Default]

    Disable

    Idle Period (days)

    Idle days of a system account.

    [Value range]

    Its value is an integer ranging from 1 to 999.

    [Default]

    60

    Login Security Info

    After a user login, information about the last login (including the login time and IP address) is displayed.

    [Default]

    Disable

    User-Defined Info

    After an account's successful login, an alarm is displayed indicating the preset information.

    [Default]

    Disable

    Info

    The information to prompt the successful login of user account.

    [Example]

    Login successful

    Table 3-4  Advanced parameters

    Parameter

    Description

    Value

    User Account Audit

    Periodically audit the number and permission of user accounts to ensure account security.

    [Default]

    Disable

    Audit Period (days)

    Periodically audit period of the account.

    [Value range]

    Its value is an integer ranging from 0 to 999.

    [Default]

    120

  4. Confirm the operation.
    1. Click Save.

      The Execution Result dialog box is displayed, indicating that the operation succeeded.

    2. Click Close.
Translation
Download
Updated: 2019-04-17

Document ID: EDOC1000084191

Views: 85733

Downloads: 2300

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next