secadm accountlockoutpolicy - Security Administration: Maintain Account Lockout Policies

secadm accountlockoutpolicy list

secadm accountlockoutpolicy display account-lockout-policy-name

secadm accountlockoutpolicy add account-lockout-policy-name [--description description] [--lockoutpolicy lockout-policy] [--lockouttype lockout-type] [--autoresettime auto-reset-time] [--maxfailedlogins max-failed-logins]

secadm accountlockoutpolicy update account-lockout-policy-name [--description description] [--lockoutpolicy lockout-policy] [--lockouttype lockout-type] [--autoresettime auto-reset-time] [--maxfailedlogins max-failed-logins]

secadm accountlockoutpolicy delete account-lockout-policy-name

The secadm accountlockoutpolicy command maintains the valid lockout policies in the system.

Option Description
list List all account lockout policies in the system.
display Display an account lockout policy in the system.
add Add an account lockout policy to the system.
update Update an account lockout policy in the system.
delete Delete an account lockout policy from the system.
account-lockout-policy-name Specify the account lockout policy name.
--description description

Optional.

Add a description of the account lockout policy.

--lockoutpolicy lockout-policy

Disabled

– or –

Enabled

This field indicates whether a lockout policy is enabled.

Note: 

This value is case-sensitive.

--lockouttype lockout-type

Permanent

– or –

Temporary

This field indicates whether a lockout policy is permanent (locks the user out until the administrator resets the password) or temporary (will allow the user to try again after a specified amount of time).

Note: 

This value is case-sensitive.

--autoresettime auto-reset-time

Required, when the lock out type is temporary.

The amount of time in seconds that must pass before another attempt can be made at logging in.

The default is 600.

--maxfailedlogins max-failed-logins

The maximum number of failed login attempts that can occur before the user is presented with security questions (if enabled).

The default is 10.