"Required Password Change Period" setting configured under "Password Profiles" does not work
9992
Created On 05/20/20 00:44 AM - Last Modified 03/29/25 00:01 AM
Symptom
- Password Policy is configured under GUI: Device (or Panorama) > Password Profiles
- The setting of "Required Password Change Period" is configured.
- This Profile is applied under GUI: Device (or Panorama) > Administrators > (name)
- Although the setting is configured correctly, the password change request will not happen even after the setting period.
- Refer Device Password Profiles
Environment
- Any Panorama or Palo Alto Firewalls
- Supported PAN-OS.
- Password Profiles applied to Admin users
Cause
Minimum Password Complexity has to be enabled.
Resolution
- Enable Minimum Password Complexity using GUI: Device (or Panorama) > Setup > Management > Minimum Password Complexity > Enabled (checked)
- Commit the configuration
Additional Information
CLI commands
> configure
# set mgt-config password-complexity enabled yes
# commit
# exit
>