Username and passwords - Metasys - LIT-12012116 - Server - Metasys UI - 6.0

Johnson Controls System Configuration Tool (JCT) Help
Product
Building Automation Systems > Graphics and Interfaces > Metasys UI
Document type
User Guide
Document number
LIT-12012116
Version
6.0
Revision date
2022-05-20

How do I know which user is logged on? Why is the user name partially hidden?

You can view which user is logged on to the JCT when you open the User menu. The user information appears below the Help button. Only the first three characters of the user name appear. The remaining characters are hidden to ensure that unauthorized users cannot gain access to the user name used to log into the system.

What happens when I change a user account password in the JCT? Does my user account password change in the Metasys system?

If you change the password for a user account in the Metasys SCT, the user account password changes in the JCT.

What are the rules for creating a valid password? How often do passwords expire?

The following table lists the password rules enforced by the Metasys system user's language locale setting.

Table 1. Metasys system password rules
Supported language_locale Enforced password rules
English (en_us)
  • The password must include a minimum of 8 characters and a maximum of 50 characters.
  • The password cannot include spaces or include a word or phrase that is in the Blocked Words list.
  • The password and the user name cannot share the same three consecutive characters.
  • The password must meet the four following conditions:
    • Include at least one number (0–9)
    • Include at least one special character (-, ., @, #, !, ?, $, %)
      Note: Only the special characters listed above can be used; all other special characters are invalid.
    • Include at least one uppercase character
    • Include at least one lowercase character
Czech (cs_cz)

German (de_de)

Spanish (es_es)

French (fr_fr)

Hungarian (hu_hu)

Italian (it_it)

Norwegian (nb_no)

Dutch (nl_nl)

Polish (pl_pl)

Portuguese (Brazilian) (pt_br)

Russian (ru_ru)

Swedish (sv_se)

Turkish (tr_tr)
  • The password must include a minimum of 8 characters and a maximum of 50 characters.
  • The password cannot include spaces or include a word or phrase that is in the Blocked Words list.
  • The password and the username cannot share the same three consecutive characters.
  • The password must meet three of the following conditions:
    • Include at least one number (0–9)
    • Include at least one special character (-, ., @, #, !, ?, $, %)
    • Include at least one uppercase character
    • Include at least one lowercase character
    • Include at least one Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase
Chinese Simplified (zh_cn)

Chinese Traditional (zh_tw)

Japanese (ja_jp)

Korean (ko_kr)
  • The password must include a minimum of 8 characters and a maximum of 50 characters.
  • The password cannot include spaces or include a word or phrase that is in the Blocked Words list.
  • The password and the user name cannot share the same three consecutive characters.
  • The password must meet two of the following conditions:
    • Include at least one number (0–9)
    • Include at least one special character (-, ., @, #, !, ?, $, %)
    • Include at least one uppercase character
    • Include at least one lowercase character
    • Include at least one Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase

Password expiration is configured for each user account in the SCT.

Notes:
  • To prevent your iOS or Android tablet or phone from saving your user name, turn off or disable the character preview setting. Refer to your tablet or phone documentation for further instructions.
  • The JCT does not support auto-fill functionality for the user name or password fields.

Refer to the Account Policy Tab section in the Security Administrator System Technical Bulletin (LIT-1201528) for further information about how passwords are used by the user account, the account lockout policy and the inactive session policy.