ADSM-L

[ADSM-L] Strong TSM Passwords?

2012-07-23 18:09:06
Subject: [ADSM-L] Strong TSM Passwords?
From: Kevin Kettner <kkettner AT DOIT.WISC DOT EDU>
To: ADSM-L AT VM.MARIST DOT EDU
Date: Mon, 23 Jul 2012 17:03:14 -0500
Does anyone know if IBM is ever going to expand the character set
accepted for TSM passwords? I was hoping that would happen in TSM 6.3,
but apparently it still has the same password rules as it has for as
long as I can remember:

http://pic.dhe.ibm.com/infocenter/tsminfo/v6r3/topic/com.ibm.itsm.client.doc/r_opt_password.html

A--Z
    Any letter, A through Z, uppercase or lowercase
0--9
    Any number, 0 through 9
+
    Plus
.
    Period
_
    Underscore
-
    Hyphen
&
    Ampersand


The password policy at our university is this:

 * Are at least eight alphanumeric characters long
 * Contain at least three of the following four categories:
     o upper case characters (e.g., A-Z)
     o lower case characters (e.g., a-z)
     o Digits (e.g., 0-9)
     o Special characters ( e.g., !@#$%^&*()_+|~-=\`{}[]:";'<>?,./)

TSM doesn't meet that standard and it seems a little silly as that seems
to be the industry standard for secure passwords.

And yes, I am aware that special characters do not actually improve
password security that much, but...

http://xkcd.com/936/