Request for Vendor Statement Regarding Password Expiry Configuration for Admin Accounts

Products

• Network Observability
• CA Performance Management

Issue/Introduction

Is disabling password expiry for these OS admin accounts (eg., dradmin, root, ...) required from a PM product/support perspective.

Environment

All supported releases of Performance Management

Resolution

• The passwords for users that are used to run NetOps PM processes should be updated on any systems prior to the expiration.

• Not doing this in a timely manner introduces the risk of NetOps PM processes to be blocked from running by the OS.

• Depending upon the security posture of environment, you can choose to not expire those users (using passwords or ssh keys) to eliminate that risk, or to periodically update passwords/keys to prevent those users being disabled.