Configuring Security Policies

The Security Tab in the application’s user interface serves as the central hub for managing and configuring all aspects of system security. It is designed to provide administrators with granular control over authentication, authorization, data integrity, and regulatory compliance.

Note - You can only access this function if you have the Can access Settings permission. To update settings you need the Can edit Settings permission. If you need to access these functions and do not have permission, please contact your system administrator.

The tab is divided into three sections:

  • User Account Management - Involves creating, maintaining, securing and removing user accounts within an organization’s systems.

  • Password Management - Involves creating, storing, retrieving and updating passwords used to authenticate users.

  • Password Complexity - Refers to the strength of a password based on its structure and how difficult it is to guess or crack.

To manage your device security:

  1. From the EPM Data User Interface screen, select Options - Settings and Users - Settings:

  2. The Settings screen displays, select Security Policies which then displays on the right-hand side of the screen:

  3. Select from the following options to expand the details:

    To manage user accounts, complete as required:

    • Session Timeout (mins) - Defaults to 15 or use the Plus or Minus to edit the minutes required.

    • If you are not already in Configuration lock, the Configuration lock screen displays:

      Enter a reason if required and then select Confirm . The system configuration is now locked pending the submission of your update and the Configuration Locked icon displays on the status bar.

      Note - Configuration lock does not affect the operation of the EPM device.
      See Configuration Lock for details.

    • Max Login Attempts - Defaults to 3, use the Plus or Minus to edit the number of unsuccessful logins before a user is locked out of the system.

    • Lockout Duration (mins) - Defaults to 5, use the Plus or Minus to edit the number of minutes to apply a lock out for, after the Max Login Attempts is exceeded.

    • Retirement - Off by default. When On , allows an administrator to mark a user account as retired or inactive.

    • Exclude Expiry - Off by default. When On , allows an administrator to prevent an account from automatically expiring.

    • Allow Multiple Sessions - Off by default. When On , allows an administrator to allow multiple sessions at one time.

      Note - Each time you change a default value, you see a message displaying the old value . Select Back to restore the previous value.

    4. To manage passwords, complete as required:

    • Expiry (Days) - Defaults to 90, or use the Plus or Minus to edit the days required.

    • If you are not already in Configuration lock, the Configuration lock screen displays:

      Enter a reason if required and then select Confirm . The system configuration is now locked pending the submission of your update and the Configuration Locked icon displays on the status bar.

      Note - Configuration lock does not affect the operation of the EPM device.
      See Configuration Lock for details.

       

    • Expiry Warning (Days) - Defaults to 14, or use the Plus or Minus to edit the days required.

    • History - Defaults to 24, or use the Plus or Minus to edit the number of previous passwords that cannot be used again.

    Note - Every time you change each default value you will see a message displaying the old value . Select Back to restore the previous value.

    To manage password complexity, complete as required:

    • Minimum Length - Defaults to 12, use the Plus or Minus to edit the password length required.

    • If you are not already in Configuration lock, the Configuration lock screen displays:

      Enter a reason if required and then select Confirm . The system configuration is now locked pending the submission of your update and the Configuration Locked icon displays on the status bar.

      Note - Configuration lock does not affect the operation of the EPM device.
      See Configuration Lock for details.

    • Maximum Length - Defaults to 64, or use the Plus or Minus to edit the password length required.

    • Upper Case Characters - Defaults to 0, or use the Plus or Minus to edit the characters required.

    • Lower Case Characters - Defaults to 0, or use the Plus or Minus to edit the characters required.

    • Numeric Characters - Defaults to 0, or use the Plus or Minus to edit the characters required.

    • Non-Alphanumeric Characters - Defaults to 0, or use the Plus or Minus to edit the characters required.

    Note - Each time you change a default value you see a message displaying the old value . Select Back to restore the previous value.

  1. Once complete, select Review pending changes screen to review updates to the configuration, and submit them. See Reviewing and Submitting Changes for details if required.

    Note - Reviewing and submitting can be completed in bulk once you have completed all your additions and/or updates.
    2. Tip - The settings were successfully updated message displays briefly at the top right corner of your screen when you make any changes. To clear the message , select Close .