Password Expiration

Enable password expiration

{{<warning>}} Password expiration is calculated from the time the password was last updated, not from when the policy is enabled. Passwords that were set long enough ago to already be expired will immediately be locked out when you enable this policy. Before enabling password expiration, verify all user passwords have been updated recently enough to avoid immediate lockouts. {{</warning>}}

To enforce an expiration of a user's password after a specified number of days:

• Use the Cluster Manager UI:

  1. Go to Cluster > Security > Preferences, then select Edit.

  2. In the Password section, turn on Expiration.

  3. Enter the number of days before passwords expire.

  4. Select Save.

• Use the cluster endpoint of the REST API

  RESTCopy

  PUT https://[host][:port]/v1/cluster
  {"password_expiration_duration":<number_of_days>}
  

Deactivate password expiration

To deactivate password expiration:

• Use the Cluster Manager UI:

  1. Go to Cluster > Security > Preferences, then select Edit.

  2. In the Password section, turn off Expiration.

  3. Select Save.

• Use the cluster REST API endpoint to set password_expiration_duration to 0 (zero).