How Do I Reset the User Password for Logging In to a Bastion Host System?

Constraints

• Password resetting is not allowed during the user account lockout. You can reset the password after the account is unlocked.
• If AD domain or RADIUS authentication is configured for some users, their passwords can only be reset or changed on the AD domain or RADIUS server. The bastion host system does not support password management operations such as resetting a password or the password validity period for these users.

Resetting the Password of the admin User

For details, see Resetting the Password of User admin.

Resetting Passwords on the Web Login Page

If you have previously logged in to CBH using an account and the account has a configured mobile number or email address, you can reset your password. To receive your verification code, ensure that the system can send SMS or email notifications.

1. On the bastion host login page, click Forgot Password? to go to the page for resetting the password.
2. Confirm the account information.

   Enter the name of the account requiring a password reset, enter the verification code, and click Next.

3. Confirm the identity for password resetting.
   Select a verification method, enter the required information as prompted, and click Next.

   Table 1 Parameters for a password reset

   Verification Method	Parameter	Description
   Phone number verification	Mobile	Enter the mobile number bound to the account.
   	SMS verification code	Click Send Code. When your phone receives the verification code, enter the code here.
   Email verification	Email	Enter the email address bound to the account.
   	Email verification code	Click Send Code. When your email receives the verification code, enter the code here.

4. Reset and confirm the password as required and click Next.

   The password must contain 8 to 32 characters. The password must contain uppercase letters (A to Z), lowercase letters (a to z), digits (0 to 9), and special characters. Spaces are not allowed.

5. After the new password is set, return to the login page and enter the username and password to log in to the CBH system.

Modifying a Password

If you have logged in to the bastion host system, you can periodically change the login password as required.

1. Log in to your bastion host system.
2. Click the login username, choose Profile, and click Change next to Password.
   Figure 1 Changing a password in the bastion host system
   

3. Enter the current password for verification, enter the new password as prompted, and confirm the new password.
4. After the new password is set, you need to log out of the system and return to the login page to log in to the bastion host system again.

Batch Resetting Passwords of Common Users

The system administrator admin or a user who has the user management permission can reset passwords for other users in batches.

1. Log in to your bastion host system.
2. Choose User > User in the navigation pane.
3. Select the users whose passwords are to be reset and click More > Reset Password to go to the page for resetting passwords.
4. Set a password.
5. Click OK to distribute the new password to the target users.
   

   • It is recommended that the users whose passwords are reset in batches change the password upon logging in to the system because the reset passwords for all the target users are the same.
   • Other users cannot reset the password of the system administrator admin.
   • You can change only the passwords of other users in batches.
   • After the password is reset, it cannot be viewed or exported in plaintext.