Fortinet white logo
Fortinet white logo

CLI Reference

system password-policy

system password-policy

Use this command to configure password policy for local administrator, FortiMail webmail user, and IBE encrypted email recipient accounts.

Remote authentication accounts do not use these settings. Instead see the documentation for your authentication server.

Syntax

config system password-policy

set status {enable | disable}

set apply-to {admin-user ibe-user local-mail-user}

set allow-admin-empty-password {enable | disable}

set minimum-length <minimum_int>

set must-contain {lower-case-letter | non-alphanumeric | number | upper-case-letter}

end

Variable

Description

Default

allow-admin-empty-password {enable | disable}

Enable to allow administrator passwords to be empty.

disable

apply-to {admin-user ibe-user local-mail-user}

Select where to apply the password policy:

  • admin_user: Local FortiMail administrator accounts.
  • local-mail-user: Local FortiMail webmail user accounts.
  • ibe-user: Recipients who access the FortiMail system to view IBE-encrypted email.

minimum-length <minimum_int>

Enter the minimum acceptable character length for passwords.

8

must-contain {lower-case-letter | non-alphanumeric | number | upper-case-letter}

Select which special character types to require in a password. Each selected type must occur at least once in the password.

  • lower-case-letter — a, b, c, ... z

  • non-alphanumeric — punctuation marks such as @,#, ... %

  • number — 0, 1, 2, 3, 4, 5, 6, 7 8, 9

  • upper-case-letter — A, B, C, ... Z

status {enable | disable}

Enable or disable the password policy.

If any password does not conform, and the password policy is enabled, then accounts selected in apply-to {admin-user ibe-user local-mail-user} will be required to change the password at the next login.

Related topics

system admin

config user mail

system encryption ibe

system global

restore config

restore image

system password-policy

system password-policy

Use this command to configure password policy for local administrator, FortiMail webmail user, and IBE encrypted email recipient accounts.

Remote authentication accounts do not use these settings. Instead see the documentation for your authentication server.

Syntax

config system password-policy

set status {enable | disable}

set apply-to {admin-user ibe-user local-mail-user}

set allow-admin-empty-password {enable | disable}

set minimum-length <minimum_int>

set must-contain {lower-case-letter | non-alphanumeric | number | upper-case-letter}

end

Variable

Description

Default

allow-admin-empty-password {enable | disable}

Enable to allow administrator passwords to be empty.

disable

apply-to {admin-user ibe-user local-mail-user}

Select where to apply the password policy:

  • admin_user: Local FortiMail administrator accounts.
  • local-mail-user: Local FortiMail webmail user accounts.
  • ibe-user: Recipients who access the FortiMail system to view IBE-encrypted email.

minimum-length <minimum_int>

Enter the minimum acceptable character length for passwords.

8

must-contain {lower-case-letter | non-alphanumeric | number | upper-case-letter}

Select which special character types to require in a password. Each selected type must occur at least once in the password.

  • lower-case-letter — a, b, c, ... z

  • non-alphanumeric — punctuation marks such as @,#, ... %

  • number — 0, 1, 2, 3, 4, 5, 6, 7 8, 9

  • upper-case-letter — A, B, C, ... Z

status {enable | disable}

Enable or disable the password policy.

If any password does not conform, and the password policy is enabled, then accounts selected in apply-to {admin-user ibe-user local-mail-user} will be required to change the password at the next login.

Related topics

system admin

config user mail

system encryption ibe

system global

restore config

restore image