Ensure the TDSQL Password Complexity Policy Is Enabled

YüksekDüzey 1Manuel incelemetdsql

Açıklama

Password complexity for database accounts must be enforced through the supported TDSQL management-platform account policy. The policy should define an organization- approved minimum length and required character classes.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

1. Review the password policy configured in the TDSQL management platform for the target 8.0 instances. 2. Confirm that minimum length and character-class requirements meet the organization standard. 3. Confirm that accounts are created and modified through the TDSQL management platform. 4. Review a recent approved password-change record to confirm enforcement.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Configure the required password strength in the TDSQL management platform and use the platform to rotate non-compliant credentials. Do not install or rely on the upstream validate_password component unless Tencent confirms support for the exact TXSQL version and deployment mode.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: tdsqlauthentication
Referans: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 7.2 Ensure the TDSQL Password Complexity Policy Is Enabled