ADSM-L

Re: [ADSM-L] Strong TSM Passwords?

2012-07-23 18:54:55
Subject: Re: [ADSM-L] Strong TSM Passwords?
From: Remco Post <r.post AT PLCS DOT NL>
To: ADSM-L AT VM.MARIST DOT EDU
Date: Tue, 24 Jul 2012 00:48:59 +0200
I know, the lack of capitals is a bit strange, but, you may enter 63 characters 
of letters, numbers and the 5 specials characters, should be plenty strong 
IMNSHO.


On 24 jul. 2012, at 00:03, Kevin Kettner wrote:

> Does anyone know if IBM is ever going to expand the character set
> accepted for TSM passwords? I was hoping that would happen in TSM 6.3,
> but apparently it still has the same password rules as it has for as
> long as I can remember:
> 
> http://pic.dhe.ibm.com/infocenter/tsminfo/v6r3/topic/com.ibm.itsm.client.doc/r_opt_password.html
> 
>> A--Z
>>    Any letter, A through Z, uppercase or lowercase
>> 0--9
>>    Any number, 0 through 9
>> +
>>    Plus
>> .
>>    Period
>> _
>>    Underscore
>> -
>>    Hyphen
>> &
>>    Ampersand
>> 
> 
> The password policy at our university is this:
> 
> * Are at least eight alphanumeric characters long
> * Contain at least three of the following four categories:
>     o upper case characters (e.g., A-Z)
>     o lower case characters (e.g., a-z)
>     o Digits (e.g., 0-9)
>     o Special characters ( e.g., !@#$%^&*()_+|~-=\`{}[]:";'<>?,./)
> 
> TSM doesn't meet that standard and it seems a little silly as that seems
> to be the industry standard for secure passwords.
> 
> And yes, I am aware that special characters do not actually improve
> password security that much, but...
> 
> http://xkcd.com/936/

-- 
Met vriendelijke groeten/Kind Regards,

Remco Post
r.post AT plcs DOT nl
+31 6 248 21 622