To log into the VMS Portal, enter the following URL in your web browser address field, where server-ip is the IP address or fully qualified domain name (FQDN) name of the VMS server:

https://<server-ip>/vms or https://www.example.com/vms

Depending on your network configuration, the first time your browser connects to the Cisco VMS web server, you may have to update your client browser to trust the security certificate of the server. This ensures the security of the connection between your client and the Cisco VMS web server.

Your user account privileges determine what you can see and do in the user interface. For information on Cisco VMS users and the actions they can perform, see Managing User Roles.

To log out, in the left pane of the VMS Portal, click Logout.

In VMS, as an administrator user, you can define various settings for the password policies, such as password strength, password minimum/maximum length, account locking, password history, and password aging.

To define the password policies, use the 'PwdPolicy' POST API in the IDM User Controller section of the User Management Service API. For more information on the User Management Service API, refer to the Swagger documentation accessible from the VMS portal > Account Settings > Swagger > SFI SDK > User Management Service API.

The following password policies settings are available in VMS:

• Password strength (characterRule) : This setting determines series of guidelines that are important for a strong password.

• Password length (lengthRule): This determines minimum and maximum password length.

• Account Locking (accountLocking) : This setting controls the lockout of a user account. Using this setting you can control how may invalid password attempts (lockoutFailCount) are allowed within a time period (lockoutFailIntervalSec). If the number of attempts is exceeded, then account gets locked for a specified time (lockoutDurationMin).

• Password History (historyRule): This setting doesn't allow to reuse previous passwords within a predefined time period.

• Password Aging Rules (agingRule): This setting controls how long an existing password is valid. The following password aging settings are available in VMS.

  • Password Expire Warning Period (expireWarningSec): With this setting, you can set the number of seconds before a password expires. In this policy, you can also set when an email notification is sent to the user before their password expires. Use the pwdExpireWarning parameter to define when the user starts to receive password expiration notifications. If this time interval is set to 0, no warning messages are sent out. The user can change their password at any time before the expiry. After expiry, they must change their password to continue using VMS.

  • Password Grace Period (graceAuthNLimit): Use this setting to define the number of grace login attempts after the Password lifetime limit has exceeded. In this policy, you can set the number of times an expired password can be used to authenticate after the password lifetime limit has exceeded. Users attempting to log in to the account during this grace period will receive a warning message to change the password. If grace authentication is not defined for the user or the user has used all allowed attempts , user login to the account fails, and the system displays the following error message, "Your password expired. Please Reset your password".

  • Maximum Password Age (maxAgesec): Using this setting, specify the number of seconds after which a password expires. Set the value to 0 if you want the password never to expire.

  • Minimum Password Age (minAgesec): Using this setting, you can set the minimum number of seconds between modifications to the password. Set the value to 0 if you want to reset/change password at any time.

{
  "policies": [
    {
      "name": "ppolicy_default",
      "description": "PHI ppolicy_default",
      "characterRule": {
        "enabled": true,
        "minDigit": 1,
        "minLowercasechars": 1,
        "minUppercasechars": 1,
        "minSpecialchars": 1
      },
      "lengthRule": {
        "enabled": true,
        "minLength": 8,
        "maxLength": 16
      },
      "accountLocking": {
        "enabled": true,
        "lockoutDurationMin": 30,
        "lockoutFailCount": 3,
        "lockoutFailIntervalSec": 60
      },
      "historyRule": {
        "enabled": true,
        "passwdhistorycount": 10,
        "passwdhistorydurationMonth": 60
      },
      "agingRule": {
        "enabled": true,
        "graceAuthNLimit": 3,
        "maxAgeSec": 10368000,
        "minAgeSec": 86400,
        "expireWarningSec": 1209600
      }
    }
]