Forcing a password change on first log in using the CLI

You can require users to change their password on their first log in to the system.

For a managed appliance, you can perform this procedure on the Central Management System appliance as well as the local appliance. The procedure remains the same. However, you will need to take the additional step to locate the appliance on the Central Management System CLI. For instructions on locating an appliance on the Central Management System CLI, see the Trellix Central Management System Administration Guide.

Note

This setting affects only users who are created after this change was made. It does not affect users who were created prior to setting this condition, even if those users have not logged in yet.

Prerequisites

Admin access

To require new users to change their passwords after their first login:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Enable the requirement:

hostname (config) # aaa authentication password local require-change new-account

Verify your change:

hostname (config) # show aaa authentication password

Save your changes:
```
hostname (config) # write memory
```