Authentication > Password Policy and Encryption
  
Password Policy and Encryption
System values let you implement your organization’s password policy.

System Values to Implement Password Policy
 
Category
Key
Description
SECURITY
PASSWORD DATABASE ENCODING
Password encoding method.
Possible values: MD5, SHA-1
Default value: MD5
SECURITY
MAX_ATTEMPTS_BEFORE _LOCK
Number of times a user can enter an incorrect password before their PRECISION user account locks.
By default, this system value is disabled.
Default value: -1
SECURITY
MIN_PASSWORD_LENGTH
Format: min=<NUMBER>,upper=<NUMBER>,lower=<NUMBER>,numbers=<NUMBER>
min: minimum acceptable password length
upper: minimum acceptable number of upper case letters in password
lower: minimum acceptable number of lower case letters in password
numbers: minimum acceptable number of numeric characters in password
SECURITY
VALID DAYS BEFORE EXPIRY
This system value applies when creating a user in option US in the Web UI. The value appears as the default value in the Password Expiry Cycle - Days field of option US, which is used to calculate the password expiry date.
For example, if the value is set to 30, then the password expiry date defaults to 30 days from the creation date.
Password History
When a user changes their password using the CHGPWD option, the password history is checked, and the user is prevented from using their two most recent passwords.
Password Encryption
For security, you can store encrypted passwords in the configuration files listed in Configuration Files that Support Encryption. This approach is more secure than storing passwords as plain text.

Configuration Files that Support Encryption
 
File
Location
Encryption
precisioncon.ini
Subfolder highway\connectors\Service in the Web UI home folder. By default, the Web UI home folder is C:\PRECISION\WebUI
jdbc passwords, for example, precision.db1.pass
precision.properties
Web UI home folder, which by default is C:\PRECISION\WebUI
jdbc passwords, for example, precision.db1.pass
highway.properties
Web UI home folder, which by default is C:\PRECISION\WebUI
jdbc passwords, for example, precision.db1.pass
schedule-service.xml
${jboss_home}\ server\default\deploy
autologin calls in this file, which send the user password as part of the url
Encrypting a Password
1 Open the encryption.bat file and ensure that the value of ITRAX_HOME is set to your Web UI location.
2 Open a command prompt window and navigate to the folder containing encryption.bat. The encryption.bat file is in the subfolder named bin in the Web UI home folder; the default Web UI home folder is C:\PRECISION\WebUI.
3 Run encryption.bat using the password that you want to encrypt as a parameter.
The .bat file returns the encrypted password.