Basic Sign-on Password Security

As of AssetWise Information Integrity Server version 16.7.27, security is applied to ensure that all passwords are case-sensitive and adhere to specific requirements.

Note: When creating a community, the ADMIN user's default password is set to "admin" (all lowercase), and then a dialog appears, prompting the user to change the ADMIN password to a qualified case-sensitive password, before the community can be added.

Passwords must adhere to the following:

Requirement	Existing AssetWise Information Integrity Server Users	New AssetWise Information Integrity Server Installations
Case-sensitive	Password remains case-insensitive until the user's first password change (manual or system-forced by virtue of password expiry), after upgrading AssetWise Information Integrity Server to version 16.7.27 or higher, at which time the password becomes case-sensitive. Users are prompted to change the password at each logon, until the password is changed, (either manually or system-enforced when a password expires), and then the case-sensitive logon security requirements are enforced.	All passwords are case-sensitive.
Minimum Password Length	If the password is not currently set, is null, or 0, the database upgrade requires a new password to be set to any value, providing it has a minimum length of six (6) characters. For existing passwords, the value is retained until either the password is manually changed or expires. At which time the password can be set to any value, providing it has a minimum length of six (6) characters.	All passwords have a minimum password length of six (6) characters. Any combination of characters can be included in a password.
Password Values (AssetWise User Accounts)	Passwords may not be identical to the AssetWise User Name. Passwords may not be blank/empty/null. Blank, 0, empty, or null passwords are not allowed.	Passwords may not be identical to the AssetWise User Name. Passwords may not be blank/empty/null. Blank, 0, empty, or null passwords are not allowed.

Requirement

Existing AssetWise Information Integrity Server Users

New AssetWise Information Integrity Server Installations

Case-sensitive

Password remains case-insensitive until the user's first password change (manual or system-forced by virtue of password expiry), after upgrading AssetWise Information Integrity Server to version 16.7.27 or higher, at which time the password becomes case-sensitive.

Users are prompted to change the password at each logon, until the password is changed, (either manually or system-enforced when a password expires), and then the case-sensitive logon security requirements are enforced.

All passwords are case-sensitive.

Minimum Password Length

If the password is not currently set, is null, or 0, the database upgrade requires a new password to be set to any value, providing it has a minimum length of six (6) characters.

For existing passwords, the value is retained until either the password is manually changed or expires. At which time the password can be set to any value, providing it has a minimum length of six (6) characters.

All passwords have a minimum password length of six (6) characters.

Any combination of characters can be included in a password.

Password Values (AssetWise User Accounts)

Passwords may not be identical to the AssetWise User Name.

Passwords may not be blank/empty/null.

Blank, 0, empty, or null passwords are not allowed.

Passwords may not be identical to the AssetWise User Name.

Passwords may not be blank/empty/null.

Blank, 0, empty, or null passwords are not allowed.