Symptom

AAA-common criteria password complexity is does not work for secret passwords. It works fine for clear text password.

Conditions

Configure passwords using 'secret' option while using common criteria profile.

Workaround

Further Problem Description

The password complexity and length parameters configured under aaa common-criteria commands will not be applied while configuring secret passwords. Common criteria policy is applicable only for clear text password. However, lifetime set in the common criteria policy can be applied to secret passwords The same information is available in the informative message as "Common criteria policy related to lifetime will only be applied". The message tells that only lifetime policy is applied on the profile. Router(config)#username test common-criteria-policy policy1 secret hello Router(config)# *Jul 27 01:50:07.158: Common criteria policy related to lifetime will only be applied