PASSWORD VALIDATION and the NEWPW options in Top Secret

Products

• Cleanup
• WEB ADMINISTRATOR FOR TOP SECRET
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

When do changes to the NEWPW control option go into effect?

How is password validation done?

 

Environment

Release: TOPSEC00200-16-Top Secret-Security
Component:

Resolution

When a user changes their password:

• The NEWPW options are interrogated
• And, if the password meets the NEWPW password controls, it will then be stored on the CA Top Secret Security File replacing the old password.

When a user signs on, but does not change their password:

• The typed in password is compared to the password held on the Security File.
• If it matches, then the user will be signed on.

NEWPW options are only interrogated, when a password is changed. So, if the values for NEWPW are changed, they will not effect users until they change their password.

Additional Information

 NEWPW CONTROL OPTION