Knowledge Base

What Are the Password Policies in Sectigo Certificate Manager?

Updated on February 17, 2026

Password policies in Sectigo Certificate Manager (SCM) define the security requirements for passwords used across the platform. They ensure administrators and organizations enforce strong, consistent password rules for both login and certificaterelated operations.

There are two main types of password policies:

Administrator Password Policies

Apply to passwords used by Standard and API administrators when signing in.
Only one policy exists for each administrator group: Default, MRAO Admins, RAO/DRAO Admins.
The Default policy always exists and may be modified.
MRAO and RAO/DRAO policies override the Default policy.

Organizational Password Policies

Can be created and assigned to specific organizations or departments.
Apply to certificate related passwords such as PKCS#12 file passwords and enrollment form password fields.

For detailed step‑by‑step guidance on password policies in SCM, refer to the following documentation link.
Understanding password policies :: Sectigo Certificate Manager Documentation