Enhanced HMC Password Policy and User Profile Management Through GUI

The HMC is one of the most security-critical components within an IBM Power environment, yet its password policy and user management capabilities remain limited when compared to modern security requirements.

I propose adding enhanced password policy management directly within the HMC GUI, allowing administrators to configure password expiration, complexity requirements, password history, account lockout settings, and inactivity controls. Administrators should also be able to force a password change at next sign-on and expire passwords for individual user profiles, this could be as simple as a check box on an edit of the user profiles.

In addition, Super Administrator accounts should have access to key account information from the User Profiles page, including:

• Last sign-on timestamp

• Last use timestamp

• Password expiry status and expiry date

• Account status (active, disabled, locked, or expired)

These enhancements would improve security, simplify administration, support compliance requirements, and provide greater visibility into privileged account usage without requiring command-line access.

Given that the HMC controls access to IBM Power infrastructure and the partitions it manages, it should provide the same level of password policy enforcement and user account visibility expected from modern enterprise management platforms.