By default, Data Replication does not enforce any security policies. However, you can configure Server Manager security policies that enforce account lockout, password strength, and password expiration.
Account Lockout
You can configure the maximum number of times that users can retry entering a password for logging in to the Server Manager Main server from the Data Replication Console or the Server Manager Command-Line Interface (CLI). If a user fails to enter a correct password after the maximum number of retries, the Server Manager temporarily locks out the user account.
Use the Server Manager MaxLoginAttempts and LoginBlockTimeout advanced properties to specify the maximum number of invalid login attempts and the account lockout duration.
The idradmin user can unlock an account. To unlock an account, click
File
>
Users
and then click
Unlock Account
in the
Users
dialog box.
Password Strength
The Data Replication Console and the Server Manager CLI can enforce the following password-strength policies when you create or edit a user account or connect to the Server Manager Main server:
Minimum password length
. Use the Server Manager CheckPasswordLength advanced property to specify the minimum password length.
Use of both uppercase and lowercase characters
. Use the Server Manager PasswordCaseSensitive advanced property to indicate whether passwords for user accounts must include both uppercase and lowercase characters.
Use of numbers
. Use the Server Manager PasswordContainNumbers advanced property to indicate whether passwords for user accounts must include one or more numbers.
Use of punctuation and symbols
. Use the Server Manager PasswordContainSpecialCharacters advanced property to indicate whether passwords for user accounts must include one or more special characters.
Password Expiration
Data Replication can enforce a password expiration policy for user accounts. Use the Server Manager ExpirationPeriodForPasswords advanced property to specify the number of days after which passwords for user accounts expire. By default, passwords never expire.