PowerProtect Data Manager 19.9 Security Configuration Guide

Configure password complexity and expiration through the REST API

This topic describes how to configure the PowerProtect Data Manager password requirements through the REST API. If you change the regular expressions, change both regular expressions to keep the rules consistent.

The PowerProtect Data Manager REST API documentation provides more information, including examples, about how to use the REST API. Supply a valid access token with each REST API call.

Common password policy describes the default password complexity rules. However, you can use the REST API to retrieve the current rules, which may be different:

GET server:REST-port/api/v2/policies/password

Supply a valid access token with the REST API call. The response returns a list of values in JSON format:

{
    "passwordRegex": "^(?=.*[A-Z])(?=.*[a-z])(?=.*\\d)(?=.*[\\p{Punct}])[A-Za-z \\d\\p{Punct}]{9,100}",
    "passwordRegexJS": "^(?=.*[a-z])(?=.*[A-Z])(?=.*\\d)(?=.*[$#@$!%*?& ^'/:,\\\\\\]\\[()+-\\.~<>\"={|}`;_])[A-Za-z\\d$#@$/!%*?& ^':,\\\\\\]\\[()+-\\.~<>\"={|}`;_]{9,}$",
    "policyDescription": "Password must have minimum 9 and maximum 100 characters, at least 1 uppercase letter, at least 1 lowercase letter, at least 1 numeric and at least 1 special character.",
    "maxAge": "P60D"
}

You can also use the REST API to change these rules:

PUT server:REST-port/api/v2/policies/password

Provide a payload with the appropriate parameters in the same JSON format. For example, to change the password expiry interval to 30 days, use "maxAge": "P30D".