Security tab (Set General Preference Utility)

Configures security settings.

Option	Description
Require strong passwords	Select this check box to enable strong password composition. If this option is enabled, passwords must meet the following requirements: Minimum of 8 characters Contain at least 1 upper case alpha character Contain at least 1 lower case alpha character Contain at least one number Contain at least one special character Not contain the same character more than twice
Password expiration period	Specifies the password expiration period in days. When the expiration period is reached, you must create a new password. Passwords must not be changed more than once in a 24-hour period without intervention by a security administrator.
Passwords to save in history	Specifies the number of passwords to save in history. When changing passwords, any passwords saved history are not allowed to be reused.
Use automatic account lockout	Select this check box to lock out users who repeatedly try but fail to enter the correct password. This can reduce the risk of unauthorized intrusions by password guessing. Configure the Lockout threshold settings to specify the number of tries in a specified number of minutes that will lock out a user. The default is 5 tries within a 5 minute period.
Automatically unlock account	Select this check box to automatically unlock accounts that reach the Lockout threshold after the number of minutes specified by Lockout period. An administrator will have to unlock locked accounts if you do not select this check box. The default period is 15 minutes.
Save auditing information	Saves or discards auditing information in the Audit Console. Audit information focuses on security-related actions performed by users. Auditing information is saved by default. For a complete list of actions that will be saved, see Actions Saved in Auditing Information.
Configure AD/LDAP sync	Click the Configure button to open a dialog box to allow the mapping of appropriate Output Manager Properties to the Active Directory attributes.
External client login	Options in this group configures embedded MFP client user logins. Select or clear check boxes to enable or disable the following settings: Allow user name / password — The user can log in by entering user name, password, and selecting a domain. Allow card swipe — The user can log in through a card swipe. The user must also enter a pin if Require PIN with card swipe is also selected. Allow manual card ID entry — The user can log in by entering an ID. The user must also enter a pin if Require PIN with manual entry is also selected. Allow unmasked card ID — The card ID will be readable as it is entered. If you clear this check box, the card ID will be masked. Default manual login method — Select the default login method users will see. It can be either of the following: Card ID Entry User Name/Password Require PIN with card swipe — Users must also enter a pin when using a card swipe. Require PIN with card ID entry — Users must also enter a pin when using manual card ID entry.