All new passwords must:
Contain a minimum of 12 characters (128 maximum).
Contain at least 2 numeric characters.
Contain at least 2 letters.
If a manager resets an employee's password, or if the employee chooses to reset the password, the system will require a new password to be chosen when logging in.
The user account will be blocked after 6 unsuccessful login attempts. A manager must then reactivate the account.
The password must be updated the next time the user resets the password or the manager sets a password for the user.