Fortinet black logo

CLI reference

config system password-policy

config system password-policy

Use this command to configure FortiNDR password policy.

Syntax

config system password-policy

set status {enable | disable}

set minimum-length <minimum_int>

set must-contain {upper-case-letter | lower-case-letter | number | non-alphanumeric}

set allow-admin-empty-passwd {enable | disable}

Variable

Description

Default

status {enable | disable}

Select to enable the password policy.

enable

minimum-length <minimum_int>

Set the minimum acceptable length for passwords.

8

must-contain < upper-case-letter | lower-case-letter | number | non-alphanumeric >

Select any of the following special character types to require in a password. Each selected type must occur at least once in the password.

upper-case-letter

A - Z

lower-case-letter

a- z

number

0, 1, 2, 3, 4, 5, 6, 7 8, 9

non-alphanumeric

Punctuation marks, @,#, ... %

upper-case-letter lower-case-letter number non-alphanumeric

allow-admin-empty-passwd { enable | disable }

Enable to allow the admin password to be empty.

disable

config system password-policy

Use this command to configure FortiNDR password policy.

Syntax

config system password-policy

set status {enable | disable}

set minimum-length <minimum_int>

set must-contain {upper-case-letter | lower-case-letter | number | non-alphanumeric}

set allow-admin-empty-passwd {enable | disable}

Variable

Description

Default

status {enable | disable}

Select to enable the password policy.

enable

minimum-length <minimum_int>

Set the minimum acceptable length for passwords.

8

must-contain < upper-case-letter | lower-case-letter | number | non-alphanumeric >

Select any of the following special character types to require in a password. Each selected type must occur at least once in the password.

upper-case-letter

A - Z

lower-case-letter

a- z

number

0, 1, 2, 3, 4, 5, 6, 7 8, 9

non-alphanumeric

Punctuation marks, @,#, ... %

upper-case-letter lower-case-letter number non-alphanumeric

allow-admin-empty-passwd { enable | disable }

Enable to allow the admin password to be empty.

disable