Ensure the TDSQL Password Complexity Policy Is Enabled

ÉlevéeNiveau 1Revue manuelletdsql

Description

Password complexity for database accounts must be enforced through the supported TDSQL management-platform account policy. The policy should define an organization- approved minimum length and required character classes.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

1. Review the password policy configured in the TDSQL management platform for the target 8.0 instances. 2. Confirm that minimum length and character-class requirements meet the organization standard. 3. Confirm that accounts are created and modified through the TDSQL management platform. 4. Review a recent approved password-change record to confirm enforcement.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Configure the required password strength in the TDSQL management platform and use the platform to rotate non-compliant credentials. Do not install or rely on the upstream validate_password component unless Tencent confirms support for the exact TXSQL version and deployment mode.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: tdsqlauthentication
Référence: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 7.2 Ensure the TDSQL Password Complexity Policy Is Enabled