Managing passwords
[Windows DS-Client only]
Password management allows you to manage the network security of backup sets in two ways:
• Associate specific backup sets to designated users
• Rotate the password of the designated users on demand or automatically
When prompted, the DS-Client Service changes the Windows password of the specified network user or computer user. When automatic password rotation is enabled, DS-Client randomly selects a new password for the specified user at a frequency and within the constraints that you define in a rotation rule.
IMPORTANT: When password rotation is applied to a user account, the account cannot be used for login or as credentials on your network until an administrator manually resets the password in the computer management console of Windows.
NOTE: When password management is used, you must manage backup sets in the Password Management screen. You cannot use the Backup Set Properties screen because the password is changed.
1. On the Setup menu, click Password Rotation.
2. To add the password of a user to be managed by DS-Client, click Add in the Password Management screen. In the Create User screen, do the following:
a) In the Enter User Information section, type the new user’s login information and click Next.
b) To enable automatic password rotation, select Enable Automatic Password Rotation and do the following:
NOTE: If you do not enable automatic password rotation, the password of this user can be rotated on demand after the user has been added to the Managed Passwords list.
• To apply an existing rotation rule, select the required rule in the Available Password Rotation Rules screen, and click Select.
• To add a new password rotation rule, click New in the Available Password Rotation Rules screen and do the following.
1. In the Add Password Rotation Rule screen, type a Name for the password rule and define the length constraints for the password.
2. To define a new complexity rule, click Add in the Complexity Constraints section. In the Add Complexity Rule screen, select the minimum length and character set from which to choose the characters for the password, and click OK.
3. When you have finished defining the password rotation rule in the Add Password Rotation Rule screen, click OK.
The password rotation rule is added to the list of Available Password Rotation Rules
4. In the Available Password Rotation Rules screen, select the required rule from the list and click Select.
5. In the Select Password Rotation Rule section, type and select the details for rotation frequency and click Next.
This password rotation rule is now applied to the rotation settings to enable automatic password rotation for this user.
c) To associate one or multiple backup sets with this user, click Select. In the Select Backup Sets screen, select one or multiple backup sets to associate with the user and click OK.
NOTE: After you have applied your selection, your selection will overwrite the Connect As setting (Backup Set Properties) for all selected backup sets.
d) Click Finish to complete adding the user to the list of Managed Passwords.
3. To associate a backup set with an existing user that has managed password, select the user in the Password Management screen and click Edit.
a) In the Modify User screen, in the Backup Sets tab, click Select.
b) In the Select Backup Sets screen, select one or multiple backup sets to associate with the user and click OK.
NOTE: After you have applied your selection, your selection will overwrite the Connect As setting (Backup Set Properties) for all selected backup sets.
The backup set is now associated with the user.
4. To dissociate a backup set from a user that has managed password, select the user in the Password Management screen and click Edit.
a) In the Modify User screen, in the Backup Sets tab, click Select.
b) In the Select Backup Sets screen, clear the backup set that you want to dissociate from the user and click OK.
The backup set is now dissociated with the user.
5. To edit the password rotation settings of a user, select the user in the Password Management screen and click Edit.
a) To enable automatic password rotation, in the Modify User screen, in the Password Rotation tab, select Enable Automatic Password Rotation and do the following:
NOTE: If you do not select this option, the password of this user can be rotated on demand after the user has been added to the Managed Passwords list.
• To apply an existing rotation rule, select the required rule in the Available Password Rotation Rules screen, and click Select.
• To add a new rotation rule to apply, click New and do the following.
1. In the Add Password Rotation Rule screen, type a Name for the password rule and define the length constraints for the password.
2. To define a new complexity rule, click Add in the Complexity Constraints section and enter the required parameters in the Add Complexity Rule screen and click OK.
3. When you have finished defining the password rotation rule, click OK to add the password rotation rule to the list of Available Password Rotation Rules.
4. In the Available Password Rotation Rules screen, select the required rule from the list and click Select.
5. To configure rotation frequency, in the Modify User screen, in the Password Rotation tab, type and select the details in the Rotation Settings section.
b) To apply a different password rotation rule for automatic password rotation, in the Modify User screen, in the Password Rotation tab, click [...]. In the Available Password Rotation Rules screen, select the required rule and click Select.
c) To modify an existing password rotation rule and apply the rule to the user, In the Available Password Rotation Rules screen, select the rule, click Edit, and do the following.
1. In the Edit Password Rotation Rule screen, make the necessary modifications to the password rotation rule.
2. When you have finished defining the password rotation rule, click OK.
3. In the Available Password Rotation Rules screen, select the required rule from the list and click Select.
d) When you have finished modifying the password rotations of the user, click Apply and OK.
6. To rotate a password immediately, select the user in the Managed Passwords list and click Rotate Now.
The password is changed, and the Last Updated time is updated. All password changes are logged in the
DS-Client Audit Trail. For more information, see
“Viewing the Audit Trail”.
7. When you have made the required password management changes, in the Password Management screen, click Close.