How to change the default values available for password policy settings

Issue

• Is it possible to change the default durations that can be used for Password Policy settings (maximum age, warning time, etc.)? We want to set the password expiration maximum age to 12 weeks, but the closet available options are 8 weeks and 13 weeks.

Environment

• DXP 7.0
• DXP 7.1
• DXP 7.2

Resolution

• To change the values available within the Password Policy configuration drop down menus (found when editing a policy within Control Panel > Users > Password Policies):
  • Navigate to Control Panel > Configuration > System Settings > Users > Password Policies
  • Find the corresponding list of durations for the desired setting (in this case, "Maximum Age Durations"), and click the "+" icon on the right to add a new option
  • Set the new option as measured in seconds (7257600 for 12 weeks), and click save
    
    
• Within the "Maximum Age" drop down when configuring the password expiration of a password policy, there will now be an option to select 12 weeks

Additional Information

• Please note that since these settings were introduced (as documented in LPS-91026) within the de-78 (for 7.0) and dxp-10 (for 7.1) fix packs, they are not yet present when using lower fix packs.
• If the portal has not yet been started, you can use the passwords.default.policy.* properties (as listed here for 7.0, 7.1, and 7.2) to change the default policy configurations to customized values. Once the portal has been initialized, however, there will be values present in the database for these properties, which take precedence over portal-ext.properties configurations.
• More configuration details can be found in our Password Policies Help Center documentation.