For information about Globalscape, visit www.globalscape.com.

Changing a User’s Password

You can change users' passwords from within the administration interface. When a new password is created, EFT determines whether the password meets complexity and reuse requirements.

The change password function supports user principal and common names (AD/LDAP). That is, it supports UPN (e.g., jdoe@globalscape.com; looks like an e-mail address) and CN (e.g., jdoe).

For HS-PCI-enabled Sites, you cannot manually create a password; the only option is to click Generate to create a unique, complex password.

If enabled, users can change their passwords in the Plain Text Client, the Web Transfer Client, and the account management web page. (On AD/LDAP Sites, if you have enabled the "User must change password at next logon" feature in AD, you must enable (set to "on") the registry setting described in KB article 10516. If you have enabled the "User cannot change password" feature in AD, users will not be able to change their passwords.)

To change a user's password

1. In the administration interface, connect to EFT and click the Server tab.

2. On the Server tab, click the user you want to configure.

3. In the right pane, click the General tab.

4. Click Change Password. The Change User Account Password dialog box appears.



5. Do one of the following:

   • In the New password and Confirm password boxes, type and confirm the password. (Not available for HS-PCI-enabled Sites.)

   • Click Generate. A complex password is generated and entered in the New password and Confirm password boxes.

6. Click the Password type list to specify a type from the following:

   • Standard - A plain text password is required.

   • Anonymous - Any password, including nothing, allows an anonymous connection.

   • Anonymous (Force e-mail) - Any well-formed e-mail address is the password

   • OTP S/KEY MD4 - Used for logging in to an OTP-enabled server.

   • OTP S/KEY MD5 - Used for logging in to an OTP-enabled server.

   PCI DSS requirement 8.5.8 states that you should not use group, shared, or generic accounts and passwords. To address this requirement, EFT hides the Anonymous password type for HS-PCI-enabled Sites anywhere that the password type is selectable, or if Enforce Strong Passwords is enabled.

7. To e-mail the user's password, type the e-mail address and select the E-mail login credentials check box. If the e-mail address is configured in the User Details, the E-Mail Address box is completed automatically. If you type an invalid e-mail address, an error message appears. (SMTP must be configured on EFT to e-mail the user.)

8. Click OK. The Change User Account Password dialog box closes and the e-mail is sent, if configured.

9. Click Apply to save the changes on EFT.