Unified Access Gateway enforces password rules in three key areas.
- Root (osLoginUser) password
- Admin user interface password
- GRUB password
1. Root (osLoginUser) password rules
Unified Access Gateway enforces distinct password policies during two phases.
- Initial deployment
- Post deployment
These rules apply to either the root user or a custom osLoginUser, depending on which user is configured during the deployment.
Rules during initial deployment for root/custom osLoginUser
During Unified Access Gateway deployment, the root password is validated based on the length and complexity.
For all deployments, the following default rules apply.
- The Password length must be at least 6 characters long.
- Must include at least one character from any of the following character classes:
- lowercase (a–z)
- uppercase (A–Z)
- number (0–9)
- Special characters - if special characters are used in the password, at least one character must be from the
! @ # $ % * ( ) _ +set, regardless of any other characters present.
For STIG deployments, the password must be at least 15 characters long and include characters from all four character classes.
Post deployment rules for root/custom osLoginUser (manual password change)
After Unified Access Gateway is deployed, if the root or osLoginUser password is changed manually using the passwd command, there are additional rules enforced along with the existing rules.
Additional rules for root/custom osLoginUser
| Rule | Example |
|---|---|
| Same character cannot be used more than 3 times in a row | • aaab1! - accepted • aaaaB1! - not accepted |
| More than 4 characters from the same class in a row not allowed | • abcd1 - accepted • abcde1 - not accepted |
| New password must have at least 8 characters different from the old password | |
| Dictionary words not allowed | |
| More than 3 characters in a sequence not allowed | • abcd - not accepted • 1234 - not accepted • a1b2c3 - accepted |
2. Admin password rules for initial and post deployment
Unified Access Gateway enforces consistent password policy for the admin user, both during deployment and when changed later through the UI or the console using scripts or commands.
- The password must be at least 8 characters long.
- Must include at least one character from each of the following character classes:
- Lowercase (a–z)
- Uppercase (A–Z)
- Number (0–9)
- Special character from the allowed list
! @ # $ % * ^ & ( ). Ensure that no other special characters are used.
Additional Notes
Overriding default values for root/custom osLoginUser
The default password rules can be overridden during deployment by configuring the passwordPolicyMinLen and passwordPolicyMinClass properties. For more information, see PowerShell deployment parameters.
Overriding default values for admin password
The default minimum length can be overridden using the adminpasswordPolicyMinLen property. For more information, see PowerShell deployment parameters.
3. GRUB password rules
The GRUB password is set with a standard, fixed value and cannot be changed manually. It is applied only in STIG-compliant deployments. The GRUB password can be obtained by contacting Omnissa Support.
Was this page helpful?