The following password security implementations are included: Important:  User names and passwords are case-sensitive. For example, if you create a  user name that is called  Anthony , you cannot log in by using the user name  anthony . Starting with DS8000 version 8.1 you can enable and configure remote authentication  through either IBM Spectrum Control (formerly IBM Tivoli Productivity Center or TPC) or IBM  Copy Services Manager to connect to a Lightweight Directory Access Protocol (LDAP)  repository.  With Copy Services Manager now preinstalled on the Management Console, an external  proxy is now optional. When remote authentication is enabled, the installation is guided  though the Remote Authentication Wizard. Figure 8-12 shows the Welcome page. After you  complete all the steps of the wizard, the DS8000 is enabled and configured for remote  authentication. 234  IBM DS8880 Architecture and Implementation Figure 8-12 Remote Authentication Wizard Welcome page 8.5.2 Remote Authentication – Password expiration, locked-out user , and failed attempts are checked. – Users with passwords that expire or that are locked out by the administrator while they  are logged on are not automatically disconnected from the DS8880. GLYPH<SM590000> The following password rules are checked when a user logs on:  GLYPH<SM590000> Users with invalidated passwords are not automatically disconnected from the DS8880. GLYPH<SM590000> Passwords that are invalidated by a change remain usable until the next password  change. GLYPH<SM590000> The valid character set, embedded user ID, age, length, and history are also checked. GLYPH<SM590000> Password rules are checked when passwords are changed.