Cisco ACS - Password Aging Rules - Aging time is from date created, date enabled or date modified?

[tharmaraj]

Hi all,

If i enable password aging time in cisco ACS to 90 days, would it be counted from the user's date created, date enabled or date modified?

[mohanak]

That depends on the conditions

• Apply age-by-date rules
• Apply age-by-uses rules

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007e6a6.html#367150

[tharmaraj]

Hi Mohanak,

I don't get it. We have ACS in place since last 2 years, and now we would like to set the global password aging time to 90 days (set-by-date). When we activate this, the user's password expiry will be counted from date created, date enabled or date modified of the user account?