Account Locking

You can configure CDM to set the number of failed log in attempts a user can make and the duration they have to wait before making another attempt. A user account can also be locked immediately after a failed log in attempt.

Configure Account Locking

You can configure the CDM.config file so that the number of failed log in attempts by CDM users is controlled.

1. Open the CDM.config file on the computer where CDM Server is installed. The default location is C:\inetpub\wwwroot\CertentCDM-Server\Config.
2. Locate the CdmAccountLockoutPolicy key:

   <CdmAccountLockoutPolicy accountLockoutThreshold="0" accountLockoutDuration="0" />

3. Modify the key by making these changes:
   • Enter a number for the accountLockoutThreshold parameter. A number greater than 0 must be used. The number entered represents the number of initial failed attempts a user can make before the duration parameter takes affect.
   • Enter a number for the accountLockoutDuration parameter. The value must be any number greater than 0 or a negative integer. A number greater than 0 represents the number of minutes a user's account is locked after the threshold has been met. When the duration has passed, the user can attempt another log in. If it fails, the duration takes effect again and for each subsequent single log in failure thereafter. Entering a negative integer locks a user's account immediately when the threshold is reached and requires an administrator to unlock it.

Log in attempts are controlled.

Unlock a User Account

You can unlock a user account in CDM that has been locked due to an incorrect login by the user.

If CDM is configured to lock a user's account immediately after a failed log in attempt by the user, the administrator must unlock the account before the user can attempt to log in again. A locked user account is indicated by a lock icon appearing in the Locked column in the Administration > Users tab.

To unlock a user account:

1. Click the Home tab, then in the Navigation Pane, click Administration.
2. Under Security, double-click Users.
3. In the work area, select the user whose account you want to unlock.
4. Click Home > Unlock User.
5. Click OK.