You can implement a generating script if additional policies need to be used for generating a random password, which cannot be mapped with the available settings.
Syntax for generating script
Public Sub CCC_PwdGenerate( policy As VI.DB.Passwords.PasswordPolicy, spwd As System.Security.SecureString)
With parameters:
policy = password policy object
spwd = generated password
TIP: To use a base object, take the Entity property of the PasswordPolicy class.
Example: Script that generates a password
In random passwords, this script replaces the invalid characters ? and ! at the beginning of a password with _.
Public Sub CCC_PwdGenerate( policy As VI.DB.Passwords.PasswordPolicy, spwd As System.Security.SecureString)
Dim pwd = spwd.ToInsecureArray()
' replace invalid characters at first position
If pwd.Length>0
If pwd(0)="?" Or pwd(0)="!"
spwd.SetAt(0, CChar("_"))
End If
End If
End Sub
To use a custom script for generating a password
-
In the Designer, create your script in the Script Library category.
-
Edit the password policy.
-
In the Manager, select the Privileged Account Management > Basic configuration data > Password policies category.
-
In the result list, select the password policy.
-
Select the Change main data task.
-
On the Scripts tab, enter the name of the script to be used to generate a password in the Generating script field.
-
Save the changes.
Related topics
You can add words to a list of restricted terms to prohibit them from being used in passwords.
NOTE: The restricted list applies globally to all password policies.
To add a term to the restricted list
-
In the Designer, select the Base data > Security settings > Password policies category.
-
Create a new entry with the Object > New menu item and enter the term you want to exclude from the list.
-
Save the changes.
When you verify a password, all the password policy settings, custom scripts, and the restricted passwords are taken into account.
To verify if a password conforms to the password policy
-
In the Manager, select the Privileged Account Management > Basic configuration data > Password policies category.
-
In the result list, select the password policy.
-
Select the Change main data task.
-
Select the Test tab.
-
Select the table and object to be tested in Base object for test.
-
Enter a password in Enter password to test.
A display next to the password shows whether it is valid or not.
When you generate a password, all the password policy settings, custom scripts and the restricted passwords are taken into account.
To generate a password that conforms to the password policy
-
In the Manager, select the Privileged Account Management > Basic configuration data > Password policies category.
-
In the result list, select the password policy.
-
Select the Change main data task.
-
Select the Test tab.
-
Click Generate.
This generates and displays a password.
