CASCADE Online functionality (HOST / PC): New rules for the definition of passwords
Clearstream Banking AG, Frankfurt1 informs customers about the future rules for the definition of passwords to access CASCADE Online functionality (HOST / PC). The new rules will be mandatorily effective on
17 September 2022
Background
The former rules for the definition of passwords to access the CASCADE Online services are outdated in terms of current security standards. Hence, the rules will be updated.
New rules for the definition of passwords
The following list shows the future requirements for the setup of passwords. It must
- Consist of eight digits;
- Contain at least a letter;
- Contain at least a number; and
- Contain one of the following special characters: “.←(+$*);-/,%→?#=“
Using the transaction “Passwort – Änderung (TRAN: PWAD)” users will be informed that there are new password rules. These can be retrieved via the Help Menu (F1):
Click to enlarge image
Implementation approach
On 17 September 2022, the new rules will be implemented. Customers who use an automated access to CASCADE information via online functionalities are requested to apply the new rules immediately after the implementation.
Online users of CASCADE HOST or PC who are invited to assign a new password after 19 September 2022, must follow the new rules. As before, the password can also be changed before its expiry date.
If there are any questions regarding the compilation of the new password, online users are requested to contact the security administrator responsible in their institution.
In a few months, the information about the current new password rules displayed under the transaction Passwort - Änderung (“Change Password”) will be removed from the screen. The additional information is intended to remind customers of the new rules only during a transition phase. Against this background, an adaptation of the CASCADE-PC screen is not planned, as the display of the password rules as well as its removal would require the installation of a new software version.
Customer simulation
The passwords for the customer simulation environment (IMS23) provided by CBF to customers are not affected by the new rules. As at present, after five unsuccessful login attempts, for example due to incorrect access data, the user will be blocked. To reactivate the user, the customer must contact the user administrator at Deutsche Börse (secuadmin@deutsche-boerse.com). The unblocking cannot be initiated by the Security Administrator appointed in the customer’s institution.
Contact
CBF customer security administrators can send specific questions regarding the introduction of the new password rules for CASCADE online functionality to the responsible experts at Deutsche Börse (secuadmin@deutsche-boerse.com).
------------------------------------------
1. This Announcement is published by Clearstream Banking AG (CBF), registered office at Mergenthalerallee 61, 65760 Eschborn, Germany, registered with the Commercial Register of the District Court in Frankfurt am Main, Germany, under number HRB 7500.