Skip to main content

accseccfg command

Use this command to display and configure account security settings.

Running the accseccfg command with no options displays all account security information. The following table shows the arguments for the options.

Table 1. accseccfg command.

The following table is a multi-row three column table consisting of the options, option descriptions, and associated values for the options.

OptionDescriptionValues
-legacySets account security to a predefined legacy set of defaults. 
-highSets account security to a predefined high set of defaults. 
-customSets account security to user defined values. 
-amSets user authentication method.local, ldap, localldap, ldaplocal
-lpLockout period after maximum login failures (minutes).0, 1, 2, 5, 10, 15, 20, 30, 60, 120, 180, or 240 minutes. The default value is 60 if "High Security" is enabled and 2 if "Legacy Security" is enabled. A value of zero disables this function.
-pePassword expiration time period (days).0 to 365 days
-prPassword required.on, off
-pcPassword complexity rules.on, off
-pdPassword minimum number of different characters.0 to 19 characters
-plPassword length.1 to 20 characters
-ciMinimum password change interval (hours).0 to 240 hours
-lfMaximum number of login failures.0 to 10
-chgdftChange default password after first login.on, off
-chgnewChange new user password after first login.on, off
-rcPassword reuse cycle.0 to 5
-wtWeb inactivity session timeout (minutes).1, 5, 10, 15, 20, none, or user
Syntax:
accseccfg [<em className="ph i">options</em>]
option:
-legacy
-high
-custom
-am <em className="ph i">authentication_method</em>
-lp <em className="ph i">lockout_period</em>
-pe <em className="ph i">time_period</em>
-pr <em className="ph i">state</em>
-pc <em className="ph i">state</em>
-pd <em className="ph i">number_characters</em>
-pl <em className="ph i">number_characters</em>
-ci <em className="ph i">minimum_interval</em>
-lf <em className="ph i">number_failures</em>
-chgdft <em className="ph i">state</em>
-chgnew <em className="ph i">state</em>
-rc <em className="ph i">reuse_cycle</em>
-wt <em className="ph i">timeout</em>
Example:
system> accseccfg
-legacy
-am local
-lp 2
-pe 0
-pr off
-pd 1
-pl 4
-ci 0
-lf 0
-chgdft off
-chgnew off
-rc 0
-wt user
system>