Black Box EncrypTight, ET1000A, ET0010A, ET0100A manual Configuring the Password Enforcement Policy

Appliance User Management

appliance that is available to that role. The ETEP can track appliance events based on user name, such as user account activity and policy deployments.

The ETEP has two roles: Administrator and Ops. The Administrator manages the appliance using the EncrypTight software. The Administrator configures the appliance, and creates and deploys policies. The Ops users is only able to log in to the CLI and has access to a limited set of commands.

Table 30	Appliance roles for ETEPs v 1.4 and later
Function		Administrator	Ops
Manage passwords and users		Yes	No
ETEMS access		Yes	No
CLI access		Yes	Yes (subset of commands)

The Administrator assigns user names, passwords and roles for all users. When first installing the ETEP, use the default Administrator password to log in, as shown in Table 31. It is strongly recommended that the Administrator change the default passwords before putting the ETEP into operation in the network.

Table 31 Default user names and passwords on the ETEP

Role	Default user name	Default password
Administrator	admin	admin
Ops	ops	ops

You must maintain at least one Administrator user account on the ETEP in order to manage the appliance. You can add as many user accounts to the ETEP as you need. The ETEP does not impose a cap on the number of user accounts that can be added.

Configuring the Password Enforcement Policy

ETEP 1.6 and later allows you to choose whether to use the default password enforcement policy or strong password enforcement. This option is configured on the Advanced tab. Prior to adding appliance users, configure the password policy on the target appliances. If you plan to configure users and passwords for multiple appliances at once, make sure that the target appliances are enforcing the same password strength policy (strong or default).

The password strength policy determines the following:

●Strength of password rules and conventions

●Password expiration period, expiration warning notification, and grace period

●Maximum number of concurrent user logins allowed

The default password controls are less stringent than the strong password controls, and use standard values for password expiration and maximum number of user logins. The default password controls are enforced on the ETEP unless you explicitly enable strong enforcement.

Earlier version of ETEP software enforce only the default password conventions.

Related topics:

●“Adding ETEP Users” on page 106

●“Password Strength Policy” on page 327

EncrypTight User Guide 103