How Setting the Minimum/Maximum Password Length Impacts PAM Users

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

The minimum and maximum password length values may need to be increased in PAM's Global Settings page in order to meet certain security standards. What is the largest value these could be set to and what impact does it have to PAM users?

Resolution

As stated on the Configure Global Setting documentation page, a local PAM user's password can be no longer than 72 characters. If the minimum and maximum password length is changed in PAM and a user's password is outside of the new range, they will be asked to change their password the next time they log into PAM.

Additional Information

These settings only affect users with the LOCAL authentication type. All other authentication types will not be affected, nor will any target accounts.