Veeam appliance - password complexity issue?

[BostjanUNIJA]

Hi.
Building a lab environment.
On Veeam appliance I am struggling with password complexity rules.
Used: VeeamSoftwareAppliance_13.0.1.1071_20251217
Clean installation.
In the wizard creating users below finished sucessfully:
veeamadmin (mfa was generated sucessfully)
veeamso (unable to login, change password after setup comples)
When creating a new (test user): veeamadmin2 when I try to login with this user I can't change the password.
Error that I get: veeam the supplied password does not meet disa stig requirements. the password contains more than 4 characthers

Tried passwords:
Veeam@Hardened#Repo2026!
Complex-Password-15!
And random password generators, but none of it works.

Is this a known bug?

[Mildur]

Hi Bostjan,

I don’t recall seeing the behavior you described in my lab, but I’ll run a quick test to see if I can reproduce it.
As always, it’s best to have our Customer Support team confirm whether this is a known issue.
That isn’t something we can reliably do over a forum post (as explained in our forum policies).

Regarding the password requirements for our software appliances, please review KB 4740.

Best,
Fabian

[Mildur]

I tested with your passwords on v13.0.1.1071 and got the following error:

The supplied password does not meet DISA STIG requirements: The password contains more than 4 characters of the same class consecutively.

This means the password contains too many consecutive characters from the same class.
Both of your examples include more than four lowercase letters in a row, so that is most likely the issue in your lab.
It works for me with Vee@mHarDeNed#Repo2026!.

This is also documented in the configuration file mentioned in our KB 4740:
/etc/security/pwquality.conf

Code: Select all

# Per : Set maxrepeat = 3 in /etc/security/pwquality.conf
maxrepeat = 3

Best,
Fabian

[BostjanUNIJA]

Mildur - you are a life saver. Was banging my head with different combinations.
Thank you.