Users require a passcode to unlock and access the features of the device, and to protect the device from information theft. Use this section to configure the passcode-related security restrictions need to be maintained for the users.
To set up password restrictions,
- Go to Policies.
- Select an existing policy or create a new one by clicking New Policy.
- Select Password from iOS Settings.
|Allow simple value||The users are allowed to set a simple passcode (without uppercase letters, numbers and special characters, or just numbers) on their device, something like 123456 or abcd.|
|Require alphanumeric value||Users are required to enter alphanumeric (alphabets, numbers, optional special characters) value as their device passcode.|
|Minimum passcode length||Set the minimum characters that the passcode should have, from the drop-down list. The value can range from 1 to 16. The field can be disabled if you are not going to set a minimum passcode length. If 10 is set, a passcode with 8 or 9, or any lower number of characters is not allowed.|
|Minimum complex characters||From the drop-down box, select a value from 1 to 4, to be the minimum number of special characters (like $, !, *) the passcode should have. You can disable the field if you think it’s unnecessary.|
|Maximum passcode age in days||Set a value from 1 to 730 (in days), after which the passcode will become invalid and should be updated before the deadline. Once the passcode expires, you are not allowed to use the device until you set a new one.|
|Auto lock||You can either choose never to disable auto lock or set a value from 1 to 15 (in minutes) after which the device will be locked automatically.|
|Passcode history||You can have the device store the last 1 to 50 passcodes so that these passcodes are not allowed to be set again for the specified number of times. Suppose you set the value as 5. A user has the passcode abcd1234. The user cannot use abcd1234 as the passcode for the next five times if he changes the current passcode.|
|Grace period for device lock||The period up to which a user can unlock the device without using passcodes. Values are None, Immediately, 1 minute, 5 minutes, 15 minutes, 1 hour and 4 hours. If the value is set 5 minutes, then users can unlock their device within 5 minutes without using a passcode.|
|Failed attempts||Set a value from 4 to 10. If the user enters a wrong passcode for the specified number of times, the device data will be wiped automatically.|
Associating Password Policy to Devices, Users or Groups
To associate password policies to a device,
- From Policy Targets tab, click on + Add Devices.
- Search and select all devices to which the configuration needs to the applied.
You can associate the configuration with device groups, users or user groups from Policy Targets.
To associate the policy from the page listing the policies,
- Check the policies that are needed to be associated with a device.
- From Manage, select Associate Targets.
- Select the devices.