Fortinet white logo
Fortinet white logo

CLI reference

config system password-policy

config system password-policy

Use this command to configure FortiNDR password policy.

Syntax

config system password-policy 
    set status {enable | disable}  
    set minimum-length 	<minimum_int>  
    set must-contain {upper-case-letter | lower-case-letter | number | non-alphanumeric} 
    set allow-admin-empty-passwd 	{enable | disable} 
    set min-change-characters <min_change_char_int> 
    set expire-status {enable | disable} 
    set expire-day <expire_day_int> 
end 

Variable

Description

Default

status {enable | disable}

Select to enable the password policy.

Enable

minimum-length <minimum_int>

Set the minimum acceptable length for passwords.

8

must-contain < upper-case-letter | lower-case-letter | number | non-alphanumeric >

Select any of the following special character types to require in a password. Each selected type must occur at least once in the password.

upper-case-letter

A - Z

lower-case-letter

a- z

number

0, 1, 2, 3, 4, 5, 6, 7 8, 9

non-alphanumeric

Punctuation marks, @,#, ... %

upper-case-letter lower-case-letter number non-alphanumeric

allow-admin-empty-passwd { enable | disable }

Enable to allow the admin password to be empty.

Disable

min-change-characters

Minimum number of unique characters in new password which do not exist in old password (0 - 128, default = 0.)

0

expire-status

Enable or disable password expiration.

Disable

expire-day

Nmber of days after which passwords expire (1 - 999 days, default = 90)

90

config system password-policy

config system password-policy

Use this command to configure FortiNDR password policy.

Syntax

config system password-policy 
    set status {enable | disable}  
    set minimum-length 	<minimum_int>  
    set must-contain {upper-case-letter | lower-case-letter | number | non-alphanumeric} 
    set allow-admin-empty-passwd 	{enable | disable} 
    set min-change-characters <min_change_char_int> 
    set expire-status {enable | disable} 
    set expire-day <expire_day_int> 
end 

Variable

Description

Default

status {enable | disable}

Select to enable the password policy.

Enable

minimum-length <minimum_int>

Set the minimum acceptable length for passwords.

8

must-contain < upper-case-letter | lower-case-letter | number | non-alphanumeric >

Select any of the following special character types to require in a password. Each selected type must occur at least once in the password.

upper-case-letter

A - Z

lower-case-letter

a- z

number

0, 1, 2, 3, 4, 5, 6, 7 8, 9

non-alphanumeric

Punctuation marks, @,#, ... %

upper-case-letter lower-case-letter number non-alphanumeric

allow-admin-empty-passwd { enable | disable }

Enable to allow the admin password to be empty.

Disable

min-change-characters

Minimum number of unique characters in new password which do not exist in old password (0 - 128, default = 0.)

0

expire-status

Enable or disable password expiration.

Disable

expire-day

Nmber of days after which passwords expire (1 - 999 days, default = 90)

90