"Required Password Change Period" setting configured under "Password Profiles" does not work

"Required Password Change Period" setting configured under "Password Profiles" does not work

8930
Created On 05/20/20 00:44 AM - Last Modified 03/29/25 00:01 AM


Symptom


  • Password Policy is configured under GUI: Device (or Panorama) > Password Profiles
  • The setting of "Required Password Change Period" is configured.
  • This Profile is applied under GUI: Device (or Panorama) > Administrators > (name)
  • Although the setting is configured correctly, the password change request will not happen even after the setting period.
  • Refer Device Password Profiles


Environment


  • Any Panorama or Palo Alto Firewalls
  • Supported PAN-OS.
  • Password Profiles applied to Admin users


Cause


Minimum Password Complexity has to be enabled.

Resolution


  1. Enable Minimum Password Complexity using GUI: Device (or Panorama) > Setup > Management > Minimum Password Complexity > Enabled (checked)
  2. Commit the configuration
User-added image
 
 


Additional Information


CLI commands
> configure
# set mgt-config password-complexity enabled yes
# commit
# exit
​​​​​​​>

 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U7qCAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language