Password policies configuration (Knox container profile)

With the Password policies configuration you define requirements for the Knox container password.

Note The settings supported may depend on the version of the operating system or on other device features. The scope is indicated by a blue label in Sophos Mobile.

Password type

In the Password type list, select the type of password users are allowed to configure:

Setting/Field

Description

Pattern, PIN or password

Users must set a screen lock. They can choose a type Pattern, PIN or Password screen lock. No additional restrictions are imposed.

Simple password

Users must set a Password screen lock. Digits are allowed, but the password must contain at least one letter. You can define a minimum length. See the following table.

PIN or password

Users must set a PIN or Password screen lock. You can define a minimum length. See the following table.

Alphanumeric password

Users must set a Password screen lock. The password must contain both letters and digits. You can define a minimum length. See the following table.

Complex password

Users must set a Password screen lock. The password must contain both letters and digits. You can define a minimum length and a minimum number of digits, lowercase and uppercase letters and special characters. See the following two tables.

If you select Simple password, PIN or password, Alphanumeric password or Complex password, the following fields are displayed:

Setting/Field

Description

Minimum password length

The minimum number of characters a password must contain.

Maximum idle time before password prompt

The time after the Knox container is locked if it has not been used. The container can be unlocked by entering the password.

Note The device might impose a shorter time period than what you configure here.

Maximum password age in days

Requires users to change their password in the specified interval. Value range: 0 (no password change required) to 730 days.

Number of failed attempts until device wipe

The number of failed attempts to enter the correct password before the Knox container is wiped.

Minimum history length

The number of old passwords that are remembered and compared with new ones. When the user defines a new password, it is not accepted if it matches a previously used password. Value range: 1 to 5 or none.

If you select Complex password, the following additional fields are displayed:

Setting/Field

Description

Minimum number of letters

The minimum number of letters a password must contain.

Minimum number of lowercase letters

The minimum number of lowercase letters a password must contain.

Minimum number of uppercase letters

The minimum number of uppercase letters a password must contain.

Minimum number of non-alphabetic characters

The minimum number of non-alphabetic characters (for example & or !) a password must contain.

Minimum number of digits

The minimum number of numerals a password must contain.

Minimum number of special characters

The minimum number of special characters (for example !"§$%&/()=,.-;:_@<>) a password must contain.

Biometric authentication

Setting/Field

Description

Allow fingerprint authentication

If supported by the device, the user can use fingerprint authentication to unlock the Knox container.

Allow iris authentication

If supported by the device, the user can use iris authentication to unlock the Knox container.

Allow face authentication

If supported by the device, the user can use face authentication to unlock the Knox container.