|
|
|
|
General security principles
Require complex and secure passwords
In the Central Designer Administrator application, an administrator should require that each user password meets the following requirements, which you set in the Security section, that you access by clicking System Config, and then Settings in the Central Designer Administrator application:
- Expires every 90 days. Configure this option in the Passwords expire every field.
- Has not been used recently. Configure the number of previously-used passwords that cannot be reused in the Enforce password history field.
- Contains a minimum of 8 characters. Configure this option in the Minimum password length field.
- Contains at least two of the following. Configure this option by setting the Password complexity setting to High.
- One letter and one number.
- One non-alphanumeric character.
- One upper-case and one lower-case letter, character, and at least either one number or special character.
For more information, see Configure strong user passwords.
Keep passwords private and secure
All users should change their passwords when they log in for the first time.
Tell users never to share passwords, write down passwords, or store passwords in files on their computers. For more information, see Passwords for new users.
Lock computers to protect data
Encourage users to lock computers that are left unattended. For more information, see Login security.
Provide only the necessary rights to perform an operation
Assign users to roles, and assign rights to roles so that users can perform only the tasks necessary for their jobs.
For more information, see:
