Password complexity - Metasys - LIT-12011279 - General System Information - Metasys System - 13.0.50

Network and IT Guidance Technical Bulletin
Product
Building Automation Systems > Building Automation Systems > Metasys System
Document type
Technical Bulletin
Document number
LIT-12011279
Version
13.0.50
Revision date
2024-01-26
Product status
Active

Complex passwords for Metasys local accounts at Release 7.0 and later are mandatory for all Metasys IP devices and for all user accounts in accord with the language locale that is selected on the computer. For details on complex passwords, refer to the Security Administrator System Technical Bulletin (LIT-1201528).

The following table lists the password rules enforced by the Metasys system user's language_locale setting.
Table 1. Metasys System Password Rules
Supported Language_Locale Enforced Password Rules
English (en_us)
  • The password must include a minimum of 8 characters and a maximum of 50 characters.
  • The password cannot include spaces or include a word or phrase that is in the Blocked Words list.
  • The password and the username cannot share the same three consecutive characters.
  • The password must meet the four following conditions:
    • Include at least one number (0–9)
    • Include at least one special character (-, ., @, #, !, ?, $, %)
      Note: Only the special characters listed above can be used; all other special characters are invalid.
    • Include at least one uppercase character
    • Include at least one lowercase character
Czech (cs_cz)

German (de_de)

Spanish (es_es)

French (fr_fr)

Hungarian (hu_hu)

Italian (it_it)

Norwegian (nb_no)

Dutch (nl_nl)

Polish (pl_pl)

Portuguese (Brazilian) (pt_br)

Russian (ru_ru)

Swedish (sv_se)

Turkish (tr_tr)
  • The password must include a minimum of 8 characters and a maximum of 50 characters.
  • The password cannot include spaces or include a word or phrase that is in the Blocked Words list.
  • The password and the username cannot share the same three consecutive characters.
  • The password must meet three of the following conditions:
    • Include at least one number (0–9)
    • Include at least one special character (-, ., @, #, !, ?, $, %)
    • Include at least one uppercase character
    • Include at least one lowercase character
    • Include at least one Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase
Chinese Simplified (zh_cn)

Chinese Traditional (zh_tw)

Japanese (ja_jp)

Korean (ko_kr)
  • The password must include a minimum of 8 characters and a maximum of 50 characters.
  • The password cannot include spaces or include a word or phrase that is in the Blocked Words list.
  • The password and the username cannot share the same three consecutive characters.
  • The password must meet two of the following conditions:
    • Include at least one number (0–9)
    • Include at least one special character (-, ., @, #, !, ?, $, %)
    • Include at least one uppercase character
    • Include at least one lowercase character
    • Include at least one Unicode character that is categorized as an alphabetic character but is not uppercase or lowercase

Password rules are not applicable to Active Directory users. These users are handled by the domain controller and not by the Metasys system.