New password/auth requirements in 15.5 SP6

[bonezAU]

Hi,

Is there a way to edit the policy that triggers the alert under Extensions since upgrading to SP6?
We are able to change Auth and deskphone passwords but our Auth ID field is all numbers (it's the full phone number of the extension which is 10 digits, but contains no letters).

It's alerting because it wants one lowercase, one uppercase letter and 1 number.

It's not practical to go through and change our 250 extensions.

Whilst it's not affecting users, it's just annoying to have the alert in the admin console and I'd like a way to turn it off or define my own policy to exclude the Auth ID field.

 

[Lee Cramman]

Couldn't you just highlight all extensions and then click "regenerate" to fix this?

It would also mean that you would have a random, secure password for all extensions.

 

[bonezAU]

Hi Lee,

Unfortunately not, because clicking regenerate also randomises the Auth ID field as well. We want to keep our Auth ID's the same as the full DID of the extension.

 

[Lee Cramman]

Hi Lee,

Unfortunately not, because clicking regenerate also randomises the Auth ID field as well. We want to keep our Auth ID's the same as the full DID of the extension.

Ah, I see.

To answer your original question I don't believe there is a way to disable the warnings, sorry.

I'm curious why you want to keep the Auth IDs as random ones would be more secure.

 

[YiannisH_3CX]

Hello @bonezAU

Please note that currently there is now way to disable the warning or apply your own security policy as this is hardcoded in the PBX. You could post a feature request about this in the ideas section of the forum: https://www.3cx.com/community/forums/3cx-ideas/. All posts are reviewed by their corresponding Departments and, if feasible and voted for by other users as well, may be implemented in an upcoming service pack or update.