Password Change Policies

Scenarios

You can set policies based on service requirements to ensure that the passwords of specified accounts for new host instances can be changed periodically.

Password change policies are categorized into the global baseline policies and component baseline policies.

• Global baseline password change policy: You can enable the password change policy for Linux, MySQL, and GaussDB separately. Once you enable a global baseline-based periodic password change policy, the policy will only apply to accounts for any newly added host instances that are not bound to components.
• Component baseline password change policy: You can enable the password change policy for Linux, MySQL, and GaussDB separately. Once you enable a component baseline-based periodic password change policy, the policy will only apply to the accounts for selected components on any newly added instances.

To exclude some ECS accounts from automatic password change, go to the Resource Management > Application Resource Management page. Set the tag key to COCAccountPasswordAutoManagement and the tag value to NotManagePassword by referring to Managing Tags. The settings take effect within one hour.

Setting a Password Change Policy

1. Log in to COC.
2. In the navigation pane on the left, choose Resource O&M > Automated O&M.
3. In the Routine O&M area, and click Account Management.
4. Choose Account Password Change > Password Change Policies.
5. Set a password change policy.
   • Global baseline password change policies: After a global password change policy is enabled, the passwords of accounts for logging in to all incremental host instances that are not bound to components will be changed periodically.
   • Component baseline password change policies: After a component password change policy is enabled, the passwords of accounts for logging in to all incremental host instances that are associated with the selected component will be changed periodically.
   • Component selection: Select the application or component to be selected. If you select an application, all components of the application are automatically selected.