In order to change password user needs to authenticate himself with his old password and provide a new one, changing passwords is only possible for users with local authentication type. The new password must confirm to the set Password quality rules. Additionally the new password must be different from the old password.

A password change can be initiated by the user himself or can be forced by password aging.

If password change was successful the validity of new password is set to the current date and time plus the number of days set with the Global Setting User sessions & security: Maximum password age [d].