Fortinet black logo

FortiVoice Phone System Administration Guide

Setting password policies

Copy Link
Copy Doc ID 504dcba7-bd6a-11eb-92d0-00505692583a:43550
Download PDF

Setting password policies

Security > Password Policy lets you set the SIP password and user PIN policy for administrators and extension users. For information on setting SIP password and user PIN, see Configuring IP extensions.

You can also edit extension user passwords.

To set password policies

  1. Go to Security > Password Policy > Password/PIN Policy.
  2. Configure the following:

    GUI field

    Description

    Password / PIN Policy

    • Minimum password length: Set the minimum acceptable length (8) for passwords.
    • Password must contain: Select any of the following special character types to require in a password. Each selected type must occur at least once in the password.
      • Upper-case-letter — A, B, C, ... Z
      • Lower-case-letter — a, b, c, ... z
      • Number — 0 ... 9
      • Non-alphanumeric — punctuation marks, @,#, ... %
    • Apply password policy to: Select where to apply the password policy:
      • Admin user — Apply to administrator web GUI passwords. If any password does not conform to the policy, require the administrator to change the password at the next login.
      • SIP users — Apply to FortiVoice SIP phone users’ passwords. If any password does not conform to the policy, require that user to change the password at the next login.
      • User passwords: Apply to user portal and FortiFone softclient users' access passwords. If any password does not conform to the policy, require that user to change the password at the next login.
    • Minimum PIN length: Set the minimum acceptable length (6) for the user PIN.
    • PIN must contain:
      • Number: Enable to allow the use of number digits (0-9) in the PIN.
      • PIN special: Enable to allow the use of the * and # special characters in the PIN.
    • Apply PIN policy to: Select Voicemail users to apply the policy to FortiVoice phone users’ user PIN. If any PIN does not conform to the policy, require that user to change the PIN at the next login.
    • PIN expiration: Select the voicemail PIN expiration options.
      • Never: Users set their voicemail PIN and the PIN never expires.
      • Default Only: Extension users using the default voicemail PIN is prompted to change the PIN when accessing their voicemail for the first time. For information on voicemail PIN, see Configuring IP extensions.
      • All: Extension users are prompted to change the voicemail PIN when accessing their voicemail for the first time and regularly according to the PIN expiration time.
    • PIN expiration time: If you selected All for PIN expiration, select the PIN expiry time in days.

    Allow empty admin password

    Select to allow leaving the admin password field empty when logging in to the system.

    This option appears if you disable Password/PIN Policy.

  3. Click Apply.

To edit extension user passwords

  1. Go to Security > Password Policy > Password Auditor.
  2. Double-click an extension of which you want to edit the user passwords.
  3. Under User Setting, change the passwords as required. For more information, see Configuring IP extensions.
  4. Click OK.

Setting password policies

Security > Password Policy lets you set the SIP password and user PIN policy for administrators and extension users. For information on setting SIP password and user PIN, see Configuring IP extensions.

You can also edit extension user passwords.

To set password policies

  1. Go to Security > Password Policy > Password/PIN Policy.
  2. Configure the following:

    GUI field

    Description

    Password / PIN Policy

    • Minimum password length: Set the minimum acceptable length (8) for passwords.
    • Password must contain: Select any of the following special character types to require in a password. Each selected type must occur at least once in the password.
      • Upper-case-letter — A, B, C, ... Z
      • Lower-case-letter — a, b, c, ... z
      • Number — 0 ... 9
      • Non-alphanumeric — punctuation marks, @,#, ... %
    • Apply password policy to: Select where to apply the password policy:
      • Admin user — Apply to administrator web GUI passwords. If any password does not conform to the policy, require the administrator to change the password at the next login.
      • SIP users — Apply to FortiVoice SIP phone users’ passwords. If any password does not conform to the policy, require that user to change the password at the next login.
      • User passwords: Apply to user portal and FortiFone softclient users' access passwords. If any password does not conform to the policy, require that user to change the password at the next login.
    • Minimum PIN length: Set the minimum acceptable length (6) for the user PIN.
    • PIN must contain:
      • Number: Enable to allow the use of number digits (0-9) in the PIN.
      • PIN special: Enable to allow the use of the * and # special characters in the PIN.
    • Apply PIN policy to: Select Voicemail users to apply the policy to FortiVoice phone users’ user PIN. If any PIN does not conform to the policy, require that user to change the PIN at the next login.
    • PIN expiration: Select the voicemail PIN expiration options.
      • Never: Users set their voicemail PIN and the PIN never expires.
      • Default Only: Extension users using the default voicemail PIN is prompted to change the PIN when accessing their voicemail for the first time. For information on voicemail PIN, see Configuring IP extensions.
      • All: Extension users are prompted to change the voicemail PIN when accessing their voicemail for the first time and regularly according to the PIN expiration time.
    • PIN expiration time: If you selected All for PIN expiration, select the PIN expiry time in days.

    Allow empty admin password

    Select to allow leaving the admin password field empty when logging in to the system.

    This option appears if you disable Password/PIN Policy.

  3. Click Apply.

To edit extension user passwords

  1. Go to Security > Password Policy > Password Auditor.
  2. Double-click an extension of which you want to edit the user passwords.
  3. Under User Setting, change the passwords as required. For more information, see Configuring IP extensions.
  4. Click OK.