status {enable | disable}

Select to enable the password policy.

apply-to {admin-user | ibe-user | local-mail-user}

Select where to apply the password policy:

• admin_user: Apply to administrator passwords. If any password does not conform to the policy, require that administrator to change the password at the next login.
• local-mail-user: Apply to FortiMail webmail users’ passwords. If any password does not conform to the policy, require that user to change the password at the next login.
• ibe-user: Apply to the passwords of the users who access the FortiMail unit to view IBE encrypted email. If any password does not conform to the policy, require that user to change the password at the next login.

minimum-length <minimum_int>

Set the minimum acceptable length for passwords.

must-contain {upper-case-letter | lower-case-letter | number | non-alphanumeric}

Select any of the following special character types to require in a password. Each selected type must occur at least once in the password.

upper-case-letter — A, B, C, ... Z

lower-case-letter — a, b, c, ... z

number — 0, 1, 2, 3, 4, 5, 6, 7 8, 9

non-alphanumeric — punctuation marks, @,#, ... %