Hitachi High Technologies America, Inc. Password Policy

Transcription

1 Hitachi High Technologies America, Inc. Password Policy Revision Date: 4/17/2015

2 Table of Contents Table of Contents...2 Overview...3 Scope. 3 Guidelines...3 A. General Password Construction Guidelines...3 B. Password Protection Standards.. 4 C. Services Affected Password Change Notification...4 Change Network password Change Workstation password Password Service How to use the Forgotten Password service remotely 8 Support.8-2 -

3 1. Overview As part of HTA's ongoing initiative to improve Network and Data security and to ensure Audit compliance, IT is implementing a Network Password Change Policy. This Policy will define setting a minimum password length, institute password complexity and require password changes every 90 days. This requires all employees and personnel that have access to organizational computer systems to adhere to the password change policy defined below in order to protect the security of the Network, protect data integrity and protect computer systems. 2. Scope This policy applies to any and all personnel who have any form of computer account requiring a password to the HTA organizational network. 3. Guidelines A. General Password Construction Guidelines Your password must have the following properties: Minimum number of characters in password: 8 Maximum number of characters in password: 30 Minimum number of unique characters: 2 Maximum number for repeating a specific character sequentially: 12 You may use numbers in your password. The password is case-sensitive. Your password must be unique. You cannot reuse an old password. You cannot use the following character combinations as passwords: > Password > nissei > hitachi Good passwords have the following characteristics: Password should never be written down or stored on-line. Try to create a password that can easily be remembered. Must be at least eight alphanumeric characters long. Must be a combination of uppercase and lowercase characters. Have numbers and letters. Must not be associated with names of family, pets, place, your birth date, phone number, social security number, etc. Must not contain your user name, your real name (first, middle or last) or similar to your user name. Not easily guessed

4 B. Password Protection Standards All passwords are to be treated as sensitive, Confidential HTA information. List of good practices: Don t share your password with anyone Don t speak your password out loud or write it down Don t type your password when someone is looking over your shoulder Don t reveal your password in an message or over the phone Change your password if there is a chance of it being compromised C. Your password to the following services will match your new password. Enterprise etime Network (Novell) (Outlook) HTA Portal ipass Help Desk Share Point WebMail Office Communicator 4. Password Change Notification When your password is about to expire, you will receive an reminder from IT. The best practice is to change your password immediately so you don t get locked out of your account

5 5. Change Network Password There are two ways to change your Network password. Any one of them will work, and you only need one to succeed. a.) Through Novell: You will be prompted to change your password when you login to Novell. A Confirm dialog box is displayed 1. Click Yes to change your password. 2. The Change Password dialog box is displayed. 3. Enter your new password in the Enter New Password field. 4. Retype your new password in the Retype New Password field. 5. Click OK. You have successfully changed your password. b.) Through HTA Portal: 1. Login to the HTA portal 2. Under Applications menu, click Password Management. 3. Click Change Password

6 4. Enter and confirm your new password. 5. After all fields are filled out, click Change Password. 6. You will be notified if the password change was successful. Click Continue to logout. Follow the next steps to change your Windows password to match your network password. 6. Change Windows Password to Match Network Password. 1. Press CTRL+ALT+Delete and click Change Password. 2. Click User Account icon

7 3. Enter your Old password. 4. Enter your New password. 5. Enter your New password again to confirm. 6. After all fields are filled out, click the Arrow button. 7. Click OK. 7. Forgotten Password If you have forgotten your password, you will be able to set a new password by using the Forgotten Password service. To use this service you must set-up your Challenge Questions. How to setup or change Challenge Questions 1. Login to the Portal at 2. Under Applications menu, click Password Management. 3. Click Setup Security Questions

8 4. Choose your questions and answers that can be used to verify your identity in case you forget your password. 5. Once you ve answered all the questions, click Save Answers to save your answers. 6. You will be notified if your secret questions and answers have been successfully saved. Click Continue to go back to the main menu or click Logout to logout of Password Management. Note: These questions and their answers will be kept on file and can be used to reset your password. If you wish to change your answers, you can log back in and reenter a different answer. 8. How to use the Password service To use the Password service, you must SET-UP your Challenge Questions. Go to and click Forgot your password? 1. Enter your response to the Challenge Questions. Click on the Submit or OK. 2. Enter a New password 3. Enter your New password again to confirm 4. Click on the Submit or OK. 5. You will be notified if the password change was successful. 9. Support Individuals who need assistance should contact the IT Help Desk