Changing a User’s Password

You can change users' passwords from within the administration interface. When a new password is created, EFT Server determines whether the password meets complexity and reuse requirements.

The Change Password function supports user principal and common names (AD/LDAP). That is, it supports UPN (e.g., jdoe@globalscape.com; looks like an e-mail address) and CN (e.g., jdoe).

For HS-PCI-enabled Sites, you cannot manually create a password; the only option is to click Generate to create a unique, complex password.

If enabled, users can change their passwords in the Plain Text Client and the Web Transfer Client.

To change a user's password

1. In the administration interface, connect to EFT Server and click the Server tab.

2. In the left pane, click the user you want to configure.

3. In the right pane, click the General tab.

4. Click Change Password. The Change User Account Password dialog box appears.

5. Do one of the following:

   • In the New password and Confirm password boxes, type and confirm the password. (Not available for HS-PCI-enabled Sites.)

   • Click Generate. A complex password is generated and entered in the New password and Confirm password boxes.

6. Click the Password type list to specify a type from the following:

   • Standard - A plain text password is required.

   • Anonymous - Any password, including nothing, allows an anonymous connection.

   • Anonymous (Force e-mail) - Any well-formed e-mail address is the password

   • OTP S/KEY MD4 - Used for logging in to an OTP-enabled server.

   • OTP S/KEY MD5 - Used for logging in to an OTP-enabled server.

   • PCI DSS requirement 8.5.8 states that you should not use group, shared, or generic accounts and passwords. To address this requirement, EFT Server hides the Anonymous password type for HS-PCI-enabled Sites anywhere that the password type is selectable, or if Enforce Strong Passwords is enabled.

7. To e-mail the user's password, type the e-mail address and select the E-mail login credentials check box. If the e-mail address is configured in the User Details, the E-Mail Address box is completed automatically. If you type an invalid e-mail address, an error message appears. (SMTP must be configured on EFT Server to e-mail the user.)

8. Click OK. The Change User Account Password dialog box closes and the e-mail is sent, if configured.

9. Click Apply to save the changes on EFT Server.