Password and Account Policy Options for PGP Encryption Cloud Server and secure inboxes

Products

• PGP Command Line
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• Desktop Email Encryption
• Drive Encryption
• Encryption Management Server
• Endpoint Encryption
• File Share Encryption
• Gateway Email Encryption
• Policy Based Encryption

Issue/Introduction

This article outlines the configurable password and inactivity policy parameters for external user accounts on the PGP Encryption Cloud Server.

Resolution

Password Policy Parameters:

The following settings govern how external users interact with the Secure Inbox for PGP Encryption Cloud Server:

• Inactivity Expiration: Defines the number of days an account can remain idle before it is marked for deletion.
  • Default: 90 days.
    
    
• Account Expiration Reminders: Determines when a user is notified that their account is approaching the inactivity limit.
  • Default: 15 days prior to expiration.
    
    
• Message Expiration: Controls how long individual encrypted messages remain in the Secure Inbox, independent of account activity.
  
  
• Password Complexity: Enforces requirements for external user passphrases (e.g., minimum length, use of special characters, and digits).
  
  
• Lockout Threshold: The number of failed login attempts allowed before the account is temporarily locked (typically 3–5 attempts).
  
  
• Unlock/Reset Window: The time-to-live (TTL) for security codes emailed to users for account unlocking or password resets.
  • Default: 10 minutes.

These parameters are configured at the server level by Broadcom.
If your organization requires adjustments to any of these policies (e.g., shortening the inactivity window or increasing password complexity):

1. Identify the specific parameter and the new value you wish to implement.
2. Open a technical support case with PGP Encryption Support.
3. An engineer will verify your identity and apply the requested changes to your Cloud Server instance.

 

Additional Information

163953 - Configure Web Email Protection account expiration reminders
443376 - Understanding Expired Invitations for PGP Encryption Cloud Server
443799 - Troubleshooting Secure Inbox Login Failures and Account Lockouts