Changing the password for a user account

You may need to change the password for your own account or for another user account if the current password is about to expire or you want to change it to a more secure one.

The password must comply with the following rules:

• The password must be 8 to 256 characters long.
• The password must contain characters from at least three of the groups listed below:
  • Uppercase letters (A-Z)
  • Lowercase letters (a-z)
  • Numbers (0-9)
  • Special characters (@ # $ % ^ & * - _ ! + = [ ] { } | : ' , . ? / \ ` ~ " ( ) ;)
• The password must not contain any whitespaces, Unicode characters, or the combination of "." and "@", when "." is placed before "@".

Changing the password for your own account

To edit the password for your account:

1. In the main menu, go to your account settings, and then select Change password.
2. Enter the current password, and then specify the new password for the connection to Kaspersky Security Center.

   To see the entered password, click .

3. If your account is protected against unauthorized modification, you must confirm that you have the permissions to change this account. In the Account protection window, specify the credentials of your own account or the account that has the Modify object ACLs right in the General features: User permissions functional area.
4. If two-step verification is enabled for the account that you used in the previous step, enter the security code generated by the authenticator app on the mobile device.

Changing the password for an internal user account

To edit the password for an internal user account:

1. In the main menu, go to Users & roles → Users & groups, and then select the Users tab.
2. Click the name of the user account that you want to edit.
3. In the user settings window that opens, on the General tab, click the Change password button.
4. Set a new password for the user connection to Kaspersky Security Center.

   To see the entered password, click .

5. If necessary, enable the User must change password at first sign-in option, to force the password change at the next user authentication.
6. If the user account is protected against unauthorized modification, you must confirm that you have the permissions to change this account. In the Account protection window, specify the credentials of the account that has the Modify object ACLs right in the General features: User permissions functional area.

Configuring the options for changing a password by using server flags

You can use the klscflag utility to configure changing password by using the following commands:

• Configuring the password rotation period (the LP_SplPwdChangePeriodDays flag)

  klscflag.exe -fset -pv .core/.independent -s KLLIM -n LP_SplPwdChangePeriodDays -t d -v <rotation_period>

  Where <rotation_period> is a period of time in days after which the user password expires. Possible values: 0–730. If the parameter value is 0, the password rotation is disabled.

• Configuring the time of the previous warning about the need to change the password (the LP_SplPwdChangeNotificationHours flag)

  klscflag.exe -fset -pv .core/.independent -s KLLIM -n LP_SplPwdChangeNotificationHours -t d -v <warning_time>

  Where <warning_time> is a period of time in hours before the user password expires. During this time, the notification about the need for the password change is displayed. Possible values: 0–17520. If the parameter value is 0, the warning time is 25 percent of the password rotation period.

• Specifying the default value of the User must change password at first sign-in option (the LP_SplPwdForceChange flag)

  klscflag.exe -fset -pv .core/.independent -s KLLIM -n LP_SplPwdForceChange -t d -v <value>

  Where the possible values of the <value> flag:

  1—The User must change password at first sign-in option is enabled.

  0—The User must change password at first sign-in option is disabled.

To view the current flag value, run the following command:

klscflag.exe -fget -pv klserver -n <flag> -t d

Where <flag> is the LP_SplPwdChangePeriodDays, LP_SplPwdChangeNotificationHours, or LP_SplPwdForceChange flag.

Page top