Create a Strong Password

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Password is set during the keystore create command. You cannot check what password you used via a command; you have to manage the the password yourself.

How it is fixed

Fix method: Guidance or infrastructure patch

Use the -strong parameter on the gsk8capicmd_64 command: $ gsk8capicmd_64 -keydb -create -dbmykeystore.p12 -pw <yourpasswordhere> -strong -stash