Password Change Policies

Scenarios

You can set policies based on service requirements to ensure that the passwords of new host instances can be changed periodically.

Password change policies are categorized into the global baseline policies and component baseline policies.

• Global baseline password change policies: After a global password change policy is enabled, the passwords for logging in to all incremental host instances that are not bound to components will be changed periodically.
• Component baseline password change policies: After a component password change policy is enabled, the passwords for logging in to all incremental host instances that are associated with the selected component will be changed periodically.

To exclude some hosts from automatic password change, go to the Resource Management > Application Resource Management page. Set the tag key to COCAccountPasswordAutoManagement and the tag value to NotManagePassword by referring to Managing Tags. The settings take effect within one hour.

Setting a Password Change Policy

1. Log in to COC.
2. In the navigation pane on the left, choose Resource O&M > Automated O&M.
3. Go to the Routine O&M page and click Account Management.
4. Choose Account Password Change > Password Change Policies.
5. Set a password change policy.
   • Global baseline password change policies: After a global password change policy is enabled, the passwords for logging in to all incremental host instances that are not bound to components will be changed periodically.
   • Component baseline password change policies: After a component password change policy is enabled, the passwords for logging in to all incremental host instances that are associated with the selected component will be changed periodically.
   • Selecting components: Select the application or component to be selected. If you select an application, all components of the application are automatically selected.