These rules should be used for AS400/IBMi Password generation -- please see:
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/rzakz/rzakzpwrules.htm (if link is obsolete just search on "AS400 Password Rules")
Note that a secure randomization algorithm is employed at all distributions and assignment of character type positions.
AS400/IBMi Example: pwLength:10;norepeatchars:true;digitsMin:2;alphaMin:2;specialMin:2;specialMax:2;mixedCase;noAdjDigits;
Rule Name |
Type |
Reference |
Description |
MixedCase |
Boolean |
Password Level 2, MIXCASEn |
Set TRUE in order to include lower case alpha/letter characters |
RestrictedChars |
String |
QPWDLMTCHR |
Provide a list of restricted characters--note that the semicolon cannot be restricted but this can be achieved using the SetPasswordSpecialChars setting. |
NoRepeatChars |
Boolean |
CHRLMTREP, QPWDLMTREP |
No character can be used more than once in the password |
NoAdjChars |
Boolean |
CHRLMTAJC |
No character can be adjacent to the same character (no 2 in a row) |
AlphaMin |
Integer |
LTRMINn |
Minimum number of alphabetic characters in the password - cannot be greater than either AlphaMax or the length of the password. |
AlphaMax |
Integer |
LTRMAXn |
Maximum number of alphabetic characters in the password--cannot be greater than the length of the password or less than the AlphaMin rule. |
NoAdjAlpha |
Boolean |
LTRLMTAJC |
No alphabetic characters can be adjacent to each other / consecutive-- no two in a row. |
DigitsMin |
Integer |
DGTMINn, QPWDRQDDGT |
Minimum number of numeric characters (digits) in the password - cannot be greater than either DigitsMax or the length of the password. |
DigitsMax |
Integer |
DGTMAXn |
Maximum number of numeric characters (digits) in the password--cannot be greater than the length of the password or less than the DigitsMin rule. |
NoAdjDigit |
Boolean |
DGTLMTAJC, QPWDLMTAJC |
No numeric characters (digits) can be adjacent to each other / consecutive-- no two in a row. |
NoSpecialChars |
Boolean |
SPCMAX0 |
No Special characters included anywhere in the password--same as SpecialMax:0 |
SpecialMin |
Integer |
SPCMINn |
Minimum number of special characters in the password - cannot be greater than either SpecialMax or the length of the password. |
SpecialMax |
Integer |
SPCMAXn |
Maximum number of special characters in the password--cannot be greater than the length of the password or less than the SpecialMin rule. |
NoAdjSpecial |
Boolean |
SPCLMTAJC |
No special characters can be adjacent to each other / consecutive-- no two in a row. |
FirstNotDigit |
Boolean |
DGTLMTFST |
First character cannot be a numeric digit |
FirstNotAlpha |
Boolean |
LTRLMTFST |
First character cannot be a alphabetic character / letter |
FirstNotSpecial |
Boolean |
SPCCHRLMTFST |
First character cannot be a special character |
LastNotDigit |
Boolean |
DGTLMTLST |
Last character cannot be a numeric digit |
LastNotAlpha |
Boolean |
LTRLMTLST |
Last character cannot be a alphabetic character / letter |
LastNotSpecial |
Boolean |
SPCCHRLMTLST |
Last character cannot be a special character |
(always true) |
Boolean |
LMTSAMPOS, QPWDPOSDIF |
No characters in a generated password will include a character that matches the character in the same position as the previous password. Note that this requires no "new" passwords are generated, only replacement for passwords already known. If a password is not known than this setting is ignored. |