content_image/1011265.jpg
The following password security implementations are included: 

GLYPH<SM590000> Password rules are checked when passwords are changed. 

GLYPH<SM590000> The valid character set, embedded user ID, age, length, and history are also checked. 

GLYPH<SM590000> Passwords that are invalidated by a change remain usable until the next password change. 

GLYPH<SM590000> Users with invalidated passwords are not automatically disconnected from the DS8880. 

GLYPH<SM590000> The following password rules are checked when a user logs on: 

– Password expiration, locked-out user , and failed attempts are checked. 

– Users with passwords that expire or that are locked out by the administrator while they are logged on are not automatically disconnected from the DS8880. 

Important:  User names and passwords are case-sensitive. For example, if you create a user name that is called Anthony , you cannot log in by using the user name anthony . 

## 8.5.2 Remote Authentication 

Starting with DS8000 version 8.1 you can enable and configure remote authentication through either IBM Spectrum Control (formerly IBM Tivoli Productivity Center or TPC) or IBM Copy Services Manager to connect to a Lightweight Directory Access Protocol (LDAP) repository. 

With Copy Services Manager now preinstalled on the Management Console, an external proxy is now optional. When remote authentication is enabled, the installation is guided though the Remote Authentication Wizard. Figure 8-12 shows the Welcome page. After you complete all the steps of the wizard, the DS8000 is enabled and configured for remote authentication. 

<img src='content_image/1011265.jpg'>

