Passwords and Password Phrases › Prevent Password Phrase Changing

Prevent Password Phrase Changing

The NEWPHRASE(NU) suboption prevents users from changing their password phrases. Potential problems from selecting the NU suboption are:

• The CA Top Secret security administrator must change all user password phrases at the interval specified for each user
• The revised password phrases must be communicated to the users at the specified intervals, risking regular compromise of password confidentiality

If you prevent users from changing their password phrases and you also enforce password phrase change intervals, develop a secure communication procedure to ensure that users receive their own password phrase.