Passcode Expired?

Question

Level 2

241 points

Passcode Expired?

I searched the iPad forum as well as the new IOS 4.3 User Guide and have found no mention of this issue, so I'd like to ask....

I have an iPad 1, updated to IOS 4.3.1. Last evening I opened my iPad and slid to unlock, but when I next input my passcode, it told me "Passcode Expired". I had to enter a new one, twice to validate. Then I tried to change it bak to what it was, and it wouldn't let me, said I couldn't reuse it because it was too recent.

I wasn't aware Passcode Lock had this functionality (as I probably had been using that passcode since when I got my iPad 1 last September and it has never happened before).

Has anyone else seen this? Thanks...

iMac 2.8 gHz 24" display, 4 gig RAM, Mac OS X (10.5.8), MacBook Pro 17" 2.66 Ghz i7, 4 g RAM, OS X 10.6.4; iPhone 3GS, iPad 64 gig G3

Posted on Apr 4, 2011 4:42 AM

Reply

Answer 1

Apr 4, 2011 5:35 AM in response to JScott

Is you iPad connect to your work email system / enterprise?
If it is then your company may have instigated a higher level of security on your device.
It is certainly not a standard method of operation on iPhones / iPads.

Reply

Answer 2

JScott Author

Level 2

241 points

Apr 4, 2011 10:13 PM in response to Ian Parkinson

No, it's not.. totally my own personal device.

thanks

Reply

Answer 3

Apr 5, 2011 12:16 AM in response to JScott

Then something strange is happening as I have NEVER seen an expired passcode and I have used them for years.

Reply

Answer 4

JScott Author

Level 2

241 points

Apr 5, 2011 5:01 AM in response to Ian Parkinson

I do have it configured in Mail, Contacts, Calendars to pull my Exchange calendar at work (calendar only, not email or contacts) to the iPad calendar, so I can see work appointments and MobileMe calendar events all together. So in that sense, I have a "connection" to my job.. But that is something I did, (i.e., I didn't give my iPad to anyone at work to set that up) and, NO way could that reach out and touch the device passcode.

And, I have had Passcode enabled on my iPhone 3GS for far longer and it's never done that.

I appreciate the security aspects... not a bad thing to do. But if it is a new IOS feature, I can't find that it's documented.

Message was edited by: JScott

Reply

Answer 5

Apr 5, 2011 5:06 AM in response to JScott

Actually, yes they could. When you enabled the Exchange account with your workplace, you de facto granted them rights to "push" out security changes to your iPhone. One of them is usually (and sounds like is in your case as well), the forced use of a passcode locked (sometimes even disabling the simple 4 number passcode option and making you use a more complex passphrase).

The pushed security requirements come from the Exchange server and will override your own personal settings on the device.

Deleting the Exchange account would get rid of them. Otherwise, your work gets to set the rules if you want to use their service on your iPhone.

Reply

Answer 6

Apr 5, 2011 5:12 AM in response to JScott

As the other posted has stated, because you have setup a link to your work Exchange server you are also receiving the security levels that your workplace enforce for that to happen.

You workplace want to protect the content of their business emails and therefore they have applied security levels they want to enforce.

Apple's own web site states the following:

Microsoft Exchange ActiveSync Support
iPhone connects directly to enterprise mail servers like Microsoft Exchange and Lotus Domino via Exchange ActiveSync providing users push email, calendar events, and contacts. IT can enforce complex passcodes and remotely wipe a lost or stolen iPhone instantly. Certificate-based authentication means only approved users get access to Exchange and encrypted SSL communication to and from the server keeps data safe.

So your employer can also wipe your iPhone remotely if they want to.

Read more about it here :

http://www.apple.com/iphone/business/integration/

Reply

Answer 7

Apr 5, 2011 5:15 AM in response to Ian Parkinson

Sorry I posted the iPhone details, but the same applies to iPads.

Read more here :

http://www.apple.com/ipad/business/integration/
http://www.apple.com/ipad/business/resources/

Message was edited by: Ian Parkinson

Reply

Answer 8

JScott Author

Level 2

241 points

Apr 5, 2011 5:44 PM in response to Ian Parkinson

My gosh. I would never have assumed something like this could happen unless my employer set up the iPad and then issued it to me.

funny thing, though. I set my iPhone up the exact same way... months and months ago. And it hasn't happened to the phone. It's convenient and so I thought it would be convenient to do the same on the iPad with the much nicer calendar view. So I set it up only a week or 2 ago.

While I respect the extra security in principle, I'm not sure I like the external interventions happening to my personal device.

Reply

Answer 9

JScott Author

Level 2

241 points

Apr 5, 2011 5:47 PM in response to Michael Black

Just to clarify... if I delete the Exchange account on my iPad, I will regain control of my device settings?

Reply

Answer 10

Apr 5, 2011 11:03 PM in response to JScott

Yes

Reply

Answer 11

JScott Author

Level 2

241 points

Apr 6, 2011 3:58 AM in response to Ian Parkinson

Thanks. Since the calendar is a convenience and not a necessity, I think I'd rather do wthout it on the iPad under the circumstances. I've deleted the account and regained control of my passcode! I was immediately able to reset it and got no message about it being too recent.

And... If it ever happens on my iPhone, I'll know why and be able to exercise the same option if I wish.

Helpful and definitely enlightening.... Thanks!

Reply

Answer 12

jimhep

Level 1

0 points

Aug 13, 2011 2:13 PM in response to JScott

I use my iPhone 4 to access nhsmail via Microsoft Exchange. Tonight I was told my passcode has expired for an unknown reason - thanks to your post I see it was microsoft exchange enforcing the change...

However, I found a quick work-around:

Change passcode (temporarily)

In 'Mail, Contacts, Calenders' Settings click on Microsoft Exchange account and slide all tabs to 'off'

Reset passcode to what you want it to be in 'General' Settings

Return and turn the tabs back to 'on'

Seems unreasonable to me that they should be able to enforce this as it assumes changing your passcode makes your phone more secure....

Reply

Answer 13

Jun 24, 2014 12:35 PM in response to JScott

From the corporate system administration perspective, their responsibility and priority is to protect their internal systems. So, it's perfectly reasonable and common among security conscious companies to push security requirements to personal devices. They are essentially being proactive to ensure that any device that connects to their system meets certain baseline threshold security requirements. They cannot require that you use a personal device for work use in that case, it's just a convenience as you say. They could also just prevent you from connecting, but it sounds like they're trying to accommodate personal devices. You should feel a certain amount of relief that they are security conscious, since many companies are not. I used to be responsible for this type of thing in a prior job; initially we prohibited all personal devices. Then, due to user (and executive) pressure, we allowed personal devices. Then, due to pressure from PCI and other audits, we pushed security requirements, which got more stringent over time.

JL

Reply